deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-8514
Published: 2019-12-18
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. An application may be able to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/HT209599; https://support.apple.com/HT209600; https://support.apple.com/HT209601
CVE: CVE-2019-8515
Published: 2019-12-18
Description: A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may disclose sensitive user information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/HT209599; https://support.apple.com/HT209601; https://support.apple.com/HT209603
CVE: CVE-2019-8516
Published: 2019-12-18
Description: A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. Processing a maliciously crafted string may lead to a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://support.apple.com/HT209599; https://support.apple.com/HT209600; https://support.apple.com/HT209601
CVE: CVE-2019-8517
Published: 2019-12-18
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. Processing a maliciously crafted font may result in the disclosure of process memory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/HT209599; https://support.apple.com/HT209600; https://support.apple.com/HT209601
CVE: CVE-2019-8518
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT209599; https://support.apple.com/HT209601; https://support.apple.com/HT209602
CVE: CVE-2019-8519
Published: 2019-12-18
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. An application may be able to read restricted memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/HT209600; https://support.apple.com/HT209600
CVE: CVE-2019-8520
Published: 2019-12-18
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to read restricted memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/HT209600; https://support.apple.com/HT209600
CVE: CVE-2019-8521
Published: 2019-12-18
Description: This issue was addressed with improved checks. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. A malicious application may be able to overwrite arbitrary files.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/HT209599; https://support.apple.com/HT209600; https://support.apple.com/HT209599
CVE: CVE-2019-8522
Published: 2019-12-18
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4. An encrypted volume may be unmounted and remounted by a different user without prompting for the password.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-306
References: https://support.apple.com/HT209600; https://support.apple.com/HT209600
CVE: CVE-2019-8523
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT209599; https://support.apple.com/HT209601; https://support.apple.com/HT209603
CVE: CVE-2019-8524
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT209599; https://support.apple.com/HT209601; https://support.apple.com/HT209603
CVE: CVE-2019-8526
Published: 2019-12-18
Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://support.apple.com/HT209600; https://support.apple.com/HT209600; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8526
CVE: CVE-2019-8527
Published: 2019-12-18
Description: A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-120
References: https://support.apple.com/HT209599; https://support.apple.com/HT209600; https://support.apple.com/HT209601
CVE: CVE-2019-8529
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT209599; https://support.apple.com/HT209600; https://support.apple.com/HT209599
CVE: CVE-2019-8530
Published: 2019-12-18
Description: This issue was addressed with improved checks. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2. A malicious application may be able to overwrite arbitrary files.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/HT209599; https://support.apple.com/HT209600; https://support.apple.com/HT209601
CVE: CVE-2019-8533
Published: 2019-12-18
Description: A lock handling issue was addressed with improved lock handling. This issue is fixed in macOS Mojave 10.14.4. A Mac may not lock when disconnecting from an external monitor.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: https://support.apple.com/HT209600; https://support.apple.com/HT209600
CVE: CVE-2019-8535
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT209599; https://support.apple.com/HT209601; https://support.apple.com/HT209603
CVE: CVE-2019-8536
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT209599; https://support.apple.com/HT209601; https://support.apple.com/HT209602
CVE: CVE-2019-8537
Published: 2019-12-18
Description: An access issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. A local user may be able to view a user’s locked notes.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/HT209600; https://support.apple.com/HT209600
CVE: CVE-2019-8540
Published: 2019-12-18
Description: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to determine kernel memory layout.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-665
References: https://support.apple.com/HT209599; https://support.apple.com/HT209600; https://support.apple.com/HT209601
CVE: CVE-2019-8541
Published: 2019-12-18
Description: A privacy issue existed in motion sensor calibration. This issue was addressed with improved motion sensor processing. This issue is fixed in iOS 12.2, watchOS 5.2. A malicious app may be able to track users between installs.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/HT209599; https://support.apple.com/HT209602; https://support.apple.com/HT209599
CVE: CVE-2019-8542
Published: 2019-12-18
Description: A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. A malicious application may be able to elevate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/HT209599; https://support.apple.com/HT209600; https://support.apple.com/HT209601
CVE: CVE-2019-8544
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT209599; https://support.apple.com/HT209601; https://support.apple.com/HT209602
CVE: CVE-2019-8545
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A local user may be able to cause unexpected system termination or read kernel memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT209599; https://support.apple.com/HT209600; https://support.apple.com/HT209601
CVE: CVE-2019-8546
Published: 2019-12-18
Description: An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, watchOS 5.2. A local user may be able to view sensitive user information.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/HT209599; https://support.apple.com/HT209600; https://support.apple.com/HT209602
CVE: CVE-2019-8548
Published: 2019-12-18
Description: An issue existed where partially entered passcodes may not clear when the device went to sleep. This issue was addressed by clearing the passcode when a locked device sleeps. This issue is fixed in watchOS 5.2. A partially entered passcode may not clear when the device goes to sleep.
CVSS Score: 2.4 (LOW)
CWE: CWE-459
References: https://support.apple.com/HT209602; https://support.apple.com/HT209602
CVE: CVE-2019-8549
Published: 2019-12-18
Description: Multiple input validation issues existed in MIG generated code. These issues were addressed with improved validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://support.apple.com/HT209599; https://support.apple.com/HT209600; https://support.apple.com/HT209601
CVE: CVE-2019-8550
Published: 2019-12-18
Description: An issue existed in the pausing of FaceTime video. The issue was resolved with improved logic. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, watchOS 5.2. A user’s video may not be paused in a FaceTime call if they exit the FaceTime app while the call is ringing.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-459
References: https://support.apple.com/HT209599; https://support.apple.com/HT209600; https://support.apple.com/HT209602
CVE: CVE-2019-8551
Published: 2019-12-18
Description: A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to universal cross site scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.apple.com/HT209599; https://support.apple.com/HT209601; https://support.apple.com/HT209603
CVE: CVE-2019-8552
Published: 2019-12-18
Description: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to elevate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665
References: https://support.apple.com/HT209599; https://support.apple.com/HT209600; https://support.apple.com/HT209601
CVE: CVE-2019-8553
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2. Clicking a malicious SMS link may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT209599; https://support.apple.com/HT209601; https://support.apple.com/HT209602
CVE: CVE-2019-8554
Published: 2019-12-18
Description: A permissions issue existed in the handling of motion and orientation data. This issue was addressed with improved restrictions. This issue is fixed in iOS 12.2. A website may be able to access sensor information without user consent.
CVSS Score: 6.5 (MEDIUM)
References: https://support.apple.com/HT209599; https://support.apple.com/HT209599
CVE: CVE-2019-8555
Published: 2019-12-18
Description: A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/HT209600; https://support.apple.com/HT209600
CVE: CVE-2019-8556
Published: 2019-12-18
Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/HT209599; https://support.apple.com/HT209601; https://support.apple.com/HT209603
CVE: CVE-2019-8558
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT209599; https://support.apple.com/HT209601; https://support.apple.com/HT209602
CVE: CVE-2019-8559
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT209599; https://support.apple.com/HT209601; https://support.apple.com/HT209602
CVE: CVE-2019-8560
Published: 2019-12-18
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to read restricted memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8561
Published: 2019-12-18
Description: A logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to elevate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://support.apple.com/HT209600; https://support.apple.com/HT209600
CVE: CVE-2019-8562
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows. A sandboxed process may be able to circumvent sandbox restrictions.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-787
References: https://support.apple.com/HT209599; https://support.apple.com/HT209601; https://support.apple.com/HT209603
CVE: CVE-2019-8563
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT209599; https://support.apple.com/HT209601; https://support.apple.com/HT209602
CVE: CVE-2019-8565
Published: 2019-12-18
Description: A race condition was addressed with additional validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. A malicious application may be able to gain root privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://support.apple.com/HT209599; https://support.apple.com/HT209600; https://support.apple.com/HT209599
CVE: CVE-2019-8566
Published: 2019-12-18
Description: An API issue existed in the handling of microphone data. This issue was addressed with improved validation. This issue is fixed in iOS 12.2. A malicious application may be able to access the microphone without indication to the user.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: https://support.apple.com/HT209599; https://support.apple.com/HT209599
CVE: CVE-2019-8567
Published: 2019-12-18
Description: A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.2. A device may be passively tracked by its WiFi MAC address.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://support.apple.com/HT209599; https://support.apple.com/HT209599
CVE: CVE-2019-8568
Published: 2019-12-18
Description: A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A local user may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8571
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8574
Published: 2019-12-18
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8576
Published: 2019-12-18
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A local user may be able to cause unexpected system termination or read kernel memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8577
Published: 2019-12-18
Description: An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. An application may be able to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://research.checkpoint.com/2019/select-code_execution-from-using-sqlite/; https://support.apple.com/HT210118; https://support.apple.com/HT210119
CVE: CVE-2019-8583
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8584
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-787
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8585
Published: 2019-12-18
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. Processing a maliciously crafted movie file may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8586
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8587
Published: 2019-12-18
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-129, CWE-787
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120
CVE: CVE-2019-8589
Published: 2019-12-18
Description: This issue was addressed with improved checks. This issue is fixed in macOS Mojave 10.14.5. A malicious application may bypass Gatekeeper checks.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/HT210119; https://support.apple.com/HT210119
CVE: CVE-2019-8590
Published: 2019-12-18
Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/HT210119; https://support.apple.com/HT210119
CVE: CVE-2019-8591
Published: 2019-12-18
Description: A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to cause unexpected system termination or write kernel memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-843
References: https://support.apple.com/HT210118; https://support.apple.com/HT210119; https://support.apple.com/HT210120