) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- CPE Product Version: cpe:/o:apple:mac_os_x:10.2.5
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2019-6218 |
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to execute arbitrary code with kernel privileges. Published: March 05, 2019; 11:29:01 AM -0500 |
V3.0: 7.8 HIGH V2.0: 9.3 HIGH |
| CVE-2019-6214 |
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to break out of its sandbox. Published: March 05, 2019; 11:29:01 AM -0500 |
V3.0: 8.6 HIGH V2.0: 6.8 MEDIUM |
| CVE-2019-6213 |
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. An application may be able to execute arbitrary code with kernel privileges. Published: March 05, 2019; 11:29:01 AM -0500 |
V3.0: 7.8 HIGH V2.0: 9.3 HIGH |
| CVE-2019-6211 |
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. Processing maliciously crafted web content may lead to arbitrary code execution. Published: March 05, 2019; 11:29:00 AM -0500 |
V3.0: 8.8 HIGH V2.0: 6.8 MEDIUM |
| CVE-2019-6210 |
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to execute arbitrary code with kernel privileges. Published: March 05, 2019; 11:29:00 AM -0500 |
V3.0: 7.8 HIGH V2.0: 9.3 HIGH |
| CVE-2019-6209 |
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to determine kernel memory layout. Published: March 05, 2019; 11:29:00 AM -0500 |
V3.0: 5.5 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2019-6208 |
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes. Published: March 05, 2019; 11:29:00 AM -0500 |
V3.0: 5.5 MEDIUM V2.0: 4.3 MEDIUM |
| CVE-2019-6205 |
A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes. Published: March 05, 2019; 11:29:00 AM -0500 |
V3.0: 7.8 HIGH V2.0: 6.8 MEDIUM |
| CVE-2019-6202 |
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. A malicious application may be able to elevate privileges. Published: March 05, 2019; 11:29:00 AM -0500 |
V3.0: 7.8 HIGH V2.0: 6.8 MEDIUM |
| CVE-2019-6200 |
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. An attacker in a privileged network position may be able to execute arbitrary code. Published: March 05, 2019; 11:29:00 AM -0500 |
V3.0: 8.8 HIGH V2.0: 5.8 MEDIUM |
| CVE-2019-6235 |
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions. Published: March 04, 2019; 3:29:00 PM -0500 |
V3.0: 10.0 CRITICAL V2.0: 7.5 HIGH |
| CVE-2019-8906 |
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused. Published: February 18, 2019; 12:29:01 PM -0500 |
V3.1: 4.4 MEDIUM V2.0: 3.6 LOW |
| CVE-2018-4277 |
In iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6, a spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. Published: January 11, 2019; 1:29:02 PM -0500 |
V3.0: 7.5 HIGH V2.0: 5.0 MEDIUM |
| CVE-2018-4258 |
In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved bounds checking. Published: January 11, 2019; 1:29:02 PM -0500 |
V3.0: 9.8 CRITICAL V2.0: 10.0 HIGH |
| CVE-2018-4257 |
In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved size validation. Published: January 11, 2019; 1:29:02 PM -0500 |
V3.0: 9.8 CRITICAL V2.0: 10.0 HIGH |
| CVE-2018-4256 |
In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation. Published: January 11, 2019; 1:29:02 PM -0500 |
V3.0: 5.5 MEDIUM V2.0: 2.1 LOW |
| CVE-2018-4255 |
In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation. Published: January 11, 2019; 1:29:02 PM -0500 |
V3.0: 5.5 MEDIUM V2.0: 2.1 LOW |
| CVE-2018-4254 |
In macOS High Sierra before 10.13.5, an input validation issue existed in the kernel. This issue was addressed with improved input validation. Published: January 11, 2019; 1:29:02 PM -0500 |
V3.0: 9.8 CRITICAL V2.0: 10.0 HIGH |
| CVE-2018-4217 |
In macOS High Sierra before 10.13.5, a privacy issue in the handling of Open Directory records was addressed with improved indexing. Published: January 11, 2019; 1:29:02 PM -0500 |
V3.0: 7.5 HIGH V2.0: 5.0 MEDIUM |
| CVE-2018-4185 |
In iOS before 11.3, tvOS before 11.3, watchOS before 4.3, and macOS before High Sierra 10.13.4, an information disclosure issue existed in the transition of program state. This issue was addressed with improved state handling. Published: January 11, 2019; 1:29:01 PM -0500 |
V3.0: 7.5 HIGH V2.0: 5.0 MEDIUM |