Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-6236 1Apple 1Icloud Jun 17, 2026 Dec 18, 2019 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 A race condition existed during the installation of iCloud for Windows. This was addressed with improved state handling. This issue is fixed in iCloud for Windows 7.11. Running the iCloud installer in an untrusted direct...Show more A race condition existed during the installation of iCloud for Windows. This was addressed with improved state handling. This issue is fixed in iCloud for Windows 7.11. Running the iCloud installer in an untrusted directory may result in arbitrary code execution.Show less
CVE-2019-6232 1Apple 1Icloud Jun 17, 2026 Dec 18, 2019 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 A race condition existed during the installation of iTunes for Windows. This was addressed with improved state handling. This issue is fixed in iCloud for Windows 7.11. Running the iTunes installer in an untrusted direct...Show more A race condition existed during the installation of iTunes for Windows. This was addressed with improved state handling. This issue is fixed in iCloud for Windows 7.11. Running the iTunes installer in an untrusted directory may result in arbitrary code execution.Show less
CVE-2019-6222 1Apple 1Iphone Os Jun 17, 2026 Dec 18, 2019 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 A consistency issue was addressed with improved state handling. This issue is fixed in iOS 12.2. A website may be able to access the microphone without the microphone use indicator being shown.
CVE-2019-6207 1Apple 4Iphone Os Mac Os XTvos+1 more Jun 17, 2026 Dec 18, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicio...Show more An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to determine kernel memory layout.Show less
CVE-2019-6204 1Apple 2Iphone Os Safari Jun 17, 2026 Dec 18, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, Safari 12.1. Enabling the Safari Reader feature on a maliciously crafted webpage may lead to universal cross site scripting.
CVE-2019-6201 1Apple 5Icloud Iphone OsItunes+2 more Jun 17, 2026 Dec 18, 2019 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted...Show more Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2019-14899 4Apple FreebsdLinux+1 more 8Freebsd IpadosIphone Os+5 more Jun 17, 2026 Dec 11, 2019 N/A· v4 7.4 HIGH· v3 4.9 MEDIUM· v2 A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is using a VPN, make positive inferences abou...Show more A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is using a VPN, make positive inferences about the websites they are visiting, and determine the correct sequence and acknowledgement numbers in use, allowing the bad actor to inject data into the TCP stream. This provides everything that is needed for an attacker to hijack active connections inside the VPN tunnel.Show less
CVE-2019-9536 1Apple 1Iphone 3gs Jun 17, 2026 Nov 22, 2019 N/A· v4 6.8 MEDIUM· v3 6.9 MEDIUM· v2 Apple iPhone 3GS bootrom malloc implementation returns a non-NULL pointer when unable to allocate memory, aka 'alloc8'. An attacker with physical access to the device can install arbitrary firmware.
CVE-2019-15165 7Apple CanonicalDebian+4 more 11Communications Operations Monitor Debian LinuxFedora+8 more Jun 17, 2026 Oct 3, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
CVE-2019-15166 8Apple CanonicalDebian+5 more 10Cloud Backup Debian LinuxEnterprise Linux+7 more Jun 17, 2026 Oct 3, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.
CVE-2018-16451 6Apple DebianFedoraproject+3 more 6Debian Linux Enterprise LinuxFedora+3 more Dec 3, 2025 Oct 3, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.
CVE-2018-16230 6Apple DebianFedoraproject+3 more 6Debian Linux Enterprise LinuxFedora+3 more Dec 3, 2025 Oct 3, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI).
CVE-2018-16229 7Apple DebianF5+4 more 7Debian Linux Enterprise LinuxFedora+4 more Nov 21, 2024 Oct 3, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option().
CVE-2018-16228 6Apple DebianFedoraproject+3 more 6Debian Linux Enterprise LinuxFedora+3 more Dec 3, 2025 Oct 3, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().
CVE-2018-16227 6Apple DebianFedoraproject+3 more 6Debian Linux Enterprise LinuxFedora+3 more Nov 21, 2024 Oct 3, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield.
CVE-2018-14882 7Apple DebianF5+4 more 7Debian Linux Enterprise LinuxFedora+4 more Dec 3, 2025 Oct 3, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.
CVE-2018-14881 6Apple DebianFedoraproject+3 more 6Debian Linux Enterprise LinuxFedora+3 more Dec 3, 2025 Oct 3, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART).
CVE-2018-14880 7Apple DebianF5+4 more 23Big Ip Access Policy Manager Big Ip Advanced Firewall ManagerBig Ip Analytics+20 more Nov 21, 2024 Oct 3, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
CVE-2018-14879 7Apple DebianF5+4 more 7Debian Linux Enterprise LinuxFedora+4 more Dec 3, 2025 Oct 3, 2019 N/A· v4 7.0 HIGH· v3 5.1 MEDIUM· v2 The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().
CVE-2018-14470 6Apple DebianFedoraproject+3 more 6Debian Linux Enterprise LinuxFedora+3 more Dec 3, 2025 Oct 3, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2().

Previous 1...206207208...443 Next