Apple Macos Catalina vulnerabilities

CVE-2019-8854 [HIGH] CVE-2019-8854: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-8854 Component: Wi-Fi Impact: A device may be passively tracked by its Wi-Fi MAC address Description: A user privacy issue was addressed by removing the broadcast MAC address.

CVE-2019-8701 [HIGH] CVE-2019-8701: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-8701 Component: SharedFileList Impact: A malicious application may be able to access recent documents Description: The issue was addressed with improved permissions logic.

CVE-2019-8772 [HIGH] CVE-2019-8772: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-8772 Component: PDFKit Impact: An attacker may be able to exfiltrate the contents of an encrypted PDF Description: An issue existed in the handling of links in encrypted PDFs. This issue was addressed by adding a confirmation prompt.

CVE-2019-8741 [HIGH] CVE-2019-8741: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-8741 Component: CoreCrypto Impact: Processing a large input may lead to a denial of service Description: A denial of service issue was addressed with improved input validation.

CVE-2019-8509 [HIGH] CVE-2019-8509: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-8509 Component: File Quarantine Impact: A malicious application may be able to elevate privileges Description: This issue was addressed by removing the vulnerable code.

CVE-2019-8755 [HIGH] CVE-2019-8755: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-8755 Component: IOGraphics Impact: A malicious application may be able to determine kernel memory layout Description: A logic issue was addressed with improved restrictions.

CVE-2019-8736 [MEDIUM] CVE-2019-8736: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-8736 Component: CUPS Impact: An attacker in a privileged network position may be able to leak sensitive user information Description: An input validation issue was addressed with improved input validation.

CVE-2019-11041 [HIGH] CVE-2019-11041: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-11041 Component: CVE-2019-11041

CVE-2019-11042 [HIGH] CVE-2019-11042: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-11042 Component: CVE-2019-11042

CVE-2019-8737 [MEDIUM] CVE-2019-8737: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-8737 Component: CUPS Impact: An attacker in a privileged position may be able to perform a denial of service attack Description: A denial of service issue was addressed with improved validation.

CVE-2019-8759 [HIGH] CVE-2019-8759: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-8759 Component: IOGraphics Impact: A local user may be able to cause unexpected system termination or read kernel memory Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2019-8753 [MEDIUM] CVE-2019-8753: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-8753 Component: CFNetwork Impact: Processing maliciously crafted web content may lead to a cross site scripting attack Description: This issue was addressed with improved checks.

CVE-2019-8768 [MEDIUM] CVE-2019-8768: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-8768 Component: WebKit Impact: A user may be unable to delete browsing history items Description: "Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion.

CVE-2019-8708 [MEDIUM] CVE-2019-8708: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-8708 Component: PluginKit Impact: A local user may be able to check for the existence of arbitrary files Description: A logic issue was addressed with improved restrictions.

CVE-2019-8855 [MEDIUM] CVE-2019-8855: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-8855 Component: Sandbox Impact: A malicious application may be able to access restricted files Description: An access issue was addressed with additional sandbox restrictions.

CVE-2019-8744 [MEDIUM] CVE-2019-8744: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-8744 Component: Kernel Impact: A malicious application may be able to determine kernel memory layout Description: A memory corruption issue existed in the handling of IPv6 packets. This issue was addressed with improved memory management.

CVE-2019-8850 [MEDIUM] CVE-2019-8850: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-8850 Component: Audio Impact: Processing a maliciously crafted audio file may disclose restricted memory Description: An out-of-bounds read was addressed with improved input validation.

CVE-2019-8761 [MEDIUM] CVE-2019-8761: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-8761 Component: UIFoundation Impact: Parsing a maliciously crafted text file may lead to disclosure of user information Description: This issue was addressed with improved checks.

CVE-2019-8705 [MEDIUM] CVE-2019-8705: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2019-8705 Component: CoreAudio Impact: Processing a maliciously crafted movie may result in the disclosure of process memory Description: A memory corruption issue was addressed with improved validation.

CVE-2018-12153 [MEDIUM] CVE-2018-12153: macOS Catalina 10.15 Apple Security Update: About the security content of macOS Catalina 10.15 Product: macOS Catalina Version: 10.15 CVE: CVE-2018-12153 Component: Graphics Impact: Processing a malicious shader may result in unexpected application termination or arbitrary code execution Description: Multiple memory corruption issues were addressed with improved input validation.