Vulnerabilities (CVE)

Yack CVE helps teams search and track vulnerabilities.

TOTAL
358,413 CVE
CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-6220
1Apple
1Mac Os X
Jun 17, 2026
Mar 5, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.3. An application may be able to read restricted memory.
CVE-2019-6219
1Apple
3Iphone Os
Mac Os XWatchos
Jun 17, 2026
Mar 5, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. Processing a maliciously crafted message may lead to a denial of service.
CVE-2019-6218
1Apple
3Iphone Os
Mac Os XTvos
Jun 17, 2026
Mar 5, 2019
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to execute arbitrary code with kernel priv...Show more
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2019-6217
1Apple
6Icloud
Iphone OsItunes+3 more
Jun 17, 2026
Mar 5, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing...Show more
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2019-6216
1Apple
6Icloud
Iphone OsItunes+3 more
Jun 17, 2026
Mar 5, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing...Show more
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2019-6215
2Apple
Canonical
7Icloud
Iphone OsItunes+4 more
Jun 17, 2026
Mar 5, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web co...Show more
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2019-6214
1Apple
4Iphone Os
Mac Os XTv Os+1 more
Jun 17, 2026
Mar 5, 2019
N/A· v4
8.6 HIGH· v3
6.8 MEDIUM· v2
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to break out of its sandbox.
CVE-2019-6213
1Apple
4Iphone Os
Mac Os XTv Os+1 more
Jun 17, 2026
Mar 5, 2019
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. An application may be able to execute arbitrary code with kernel privile...Show more
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. An application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2019-6212
2Apple
Canonical
6Icloud
Iphone OsItunes+3 more
Jun 17, 2026
Mar 5, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously cr...Show more
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2019-6211
1Apple
2Iphone Os
Mac Os X
Jun 17, 2026
Mar 5, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2019-6210
1Apple
4Iphone Os
Mac Os XTv Os+1 more
Jun 17, 2026
Mar 5, 2019
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to execute arbitrary code w...Show more
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2019-6209
1Apple
4Iphone Os
Mac Os XTv Os+1 more
Jun 17, 2026
Mar 5, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A m...Show more
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to determine kernel memory layout.Show less
CVE-2019-6208
1Apple
3Iphone Os
Mac Os XTv Os
Jun 17, 2026
Mar 5, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared betwe...Show more
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes.Show less
CVE-2019-6206
1Apple
1Iphone Os
Jun 17, 2026
Mar 4, 2019
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
An issue existed with autofill resuming after it was canceled. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.3. Password autofill may fill in passwords after they were manually c...Show more
An issue existed with autofill resuming after it was canceled. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.3. Password autofill may fill in passwords after they were manually cleared.Show less
CVE-2019-6205
1Apple
3Iphone Os
Mac Os XTvos
Jun 17, 2026
Mar 5, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared betwe...Show more
A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes.Show less
CVE-2019-6202
1Apple
3Iphone Os
Mac Os XWatchos
Jun 17, 2026
Mar 5, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. A malicious application may be able to elevate privileges.
CVE-2019-6200
1Apple
2Iphone Os
Mac Os X
Jun 17, 2026
Mar 5, 2019
N/A· v4
8.8 HIGH· v3
5.8 MEDIUM· v2
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. An attacker in a privileged network position may be able to execute arbitrary code.
CVE-2019-6169
1Lenovo
1Service Bridge
Jun 17, 2026
Jun 26, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP.
CVE-2019-6168
1Lenovo
1Service Bridge
Jun 17, 2026
Jun 26, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.
CVE-2019-6167
1Lenovo
1Service Bridge
Jun 17, 2026
Jun 26, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.
CVE-2019-6166
1Lenovo
1Service Bridge
Jun 17, 2026
Jun 26, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forgery.
CVE-2019-6163
1Lenovo
1System Update
Jun 17, 2026
Jun 26, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standard locations.
CVE-2019-6160
1Lenovo
6Home Media Network Hard Drive Firmware
Ix12 300r FirmwarePx12 350r Firmware+3 more
Jun 17, 2026
Jul 16, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access files on NAS shares via the API.
CVE-2019-6158
1Lenovo
1Xclarity Administrator
Jun 17, 2026
May 3, 2019
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in clear text. This only affects LXCA when HTTP proxy credentials have been configu...Show more
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered HTTP proxy credentials being written to a log file in clear text. This only affects LXCA when HTTP proxy credentials have been configured. This affects LXCA versions 2.0.0 to 2.3.x.Show less
CVE-2019-6157
2Ibm
Lenovo
42Bladecenter Hs22 Firmware
Bladecenter Hs23 FirmwareBladecenter Hs23e Firmware+39 more
Jun 17, 2026
Apr 22, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the generated log file for support.