← Back
CWE-20

12,934 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

JSON object

Loading...

CVEs (12,934)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-8794
1Apple
5Ipados
Iphone OsMac Os X+2 more
Jun 17, 2026
Dec 18, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. An application may be able to read restricted memory.
CVE-2019-8788
1Apple
3Ipados
Iphone OsMac Os X
Jun 17, 2026
Dec 18, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1. Improper URL processing may lead to data exfiltra...Show more
An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1. Improper URL processing may lead to data exfiltration.Show less
CVE-2019-8724
1Apple
1Xcode
Jun 17, 2026
Dec 18, 2019
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution w...Show more
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.Show less
CVE-2019-8723
1Apple
1Xcode
Jun 17, 2026
Dec 18, 2019
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution w...Show more
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.Show less
CVE-2019-8722
1Apple
1Xcode
Jun 17, 2026
Dec 18, 2019
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution w...Show more
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.Show less
CVE-2019-8721
1Apple
1Xcode
Jun 17, 2026
Dec 18, 2019
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution w...Show more
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.Show less
CVE-2019-8711
1Apple
1Iphone Os
Jun 17, 2026
Dec 18, 2019
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
A logic issue existed with the display of notification previews. This issue was addressed with improved validation. This issue is fixed in iOS 13. Notification previews may show on Bluetooth accessories even when preview...Show more
A logic issue existed with the display of notification previews. This issue was addressed with improved validation. This issue is fixed in iOS 13. Notification previews may show on Bluetooth accessories even when previews are disabled.Show less
CVE-2019-8698
1Apple
2Iphone Os
Tvos
Jun 17, 2026
Dec 18, 2019
N/A· v4
3.3 LOW· v3
4.3 MEDIUM· v2
A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in iOS 12.4, tvOS 12.4. A malicious application may be able to...Show more
A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in iOS 12.4, tvOS 12.4. A malicious application may be able to restrict access to websites.Show less
CVE-2019-8670
1Apple
2Mac Os X
Safari
Jun 17, 2026
Dec 18, 2019
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.6, Safari 12.1.2. Visiting a malicious website may lead to address bar spoofing.
CVE-2019-8665
1Apple
2Iphone Os
Watchos
Jun 17, 2026
Dec 18, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.4, watchOS 5.3. A remote attacker may cause an unexpected application termination.
CVE-2019-8654
1Apple
1Safari
Jun 17, 2026
Dec 18, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.1. Visiting a malicious website may lead to user interface spoofing.
CVE-2019-8637
1Apple
3Iphone Os
TvosWatchos
Jun 17, 2026
Dec 18, 2019
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to gain root privileges.
CVE-2019-8626
1Apple
2Iphone Os
Watchos
Jun 17, 2026
Dec 18, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, watchOS 5.2.1. Processing a maliciously crafted message may lead to a denial of service.
CVE-2019-8566
1Apple
1Iphone Os
Jun 17, 2026
Dec 18, 2019
N/A· v4
3.3 LOW· v3
4.3 MEDIUM· v2
An API issue existed in the handling of microphone data. This issue was addressed with improved validation. This issue is fixed in iOS 12.2. A malicious application may be able to access the microphone without indication...Show more
An API issue existed in the handling of microphone data. This issue was addressed with improved validation. This issue is fixed in iOS 12.2. A malicious application may be able to access the microphone without indication to the user.Show less
CVE-2019-8561
1Apple
1Mac Os X
Jun 17, 2026
Dec 18, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to elevate privileges.
CVE-2019-8549
1Apple
4Iphone Os
Mac Os XTvos+1 more
Jun 17, 2026
Dec 18, 2019
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Multiple input validation issues existed in MIG generated code. These issues were addressed with improved validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application...Show more
Multiple input validation issues existed in MIG generated code. These issues were addressed with improved validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to execute arbitrary code with system privileges.Show less
CVE-2019-8516
1Apple
4Iphone Os
Mac Os XTvos+1 more
Jun 17, 2026
Dec 18, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. Processing a maliciously crafted string may lead to a denial of service.
CVE-2019-8515
1Apple
5Icloud
Iphone OsItunes+2 more
Jun 17, 2026
Dec 18, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing...Show more
A cross-origin issue existed with the fetch API. This was addressed with improved input validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may disclose sensitive user information.Show less
CVE-2019-8507
1Apple
1Mac Os X
Jun 17, 2026
Dec 18, 2019
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.4. Processing malicious data may lead to unexpected application termination.
CVE-2019-8503
1Apple
5Icloud
Iphone OsItunes+2 more
Jun 17, 2026
Dec 18, 2019
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. A malicious website may be able to execute scripts in the...Show more
A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. A malicious website may be able to execute scripts in the context of another website.Show less