CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 1CVE-2019-7286 – Apple Multiple Products Memory Corruption Vulnerability
https://notcve.org/view.php?id=CVE-2019-7286
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges. Un problema de corrupción de memoria fue abordado mejorando la comprobación de entrada. Este problema fue abordado en iOS versión 12.1.4, Actualización Complementaria macOS Mojave versión 10.14.3. • https://www.exploit-db.com/exploits/46803 https://support.apple.com/HT209520 https://support.apple.com/HT209521 https://support.apple.com/HT209601 https://support.apple.com/HT209602 • CWE-787: Out-of-bounds Write •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0CVE-2019-7288
https://notcve.org/view.php?id=CVE-2019-7288
The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Supplemental Update, iOS 12.1.4. A thorough security audit of the FaceTime service uncovered an issue with Live Photos . El problema se abordó con una comprobación del servidor FaceTime mejorada.  Este problema se corrigió en Supplemental Update de macOS Mojave versión 10.14.3, iOS versión 12.1.4. • https://support.apple.com/en-us/HT209520 https://support.apple.com/en-us/HT209521 •
CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 0CVE-2019-6223 – Apple iOS and macOS Group Facetime Vulnerability
https://notcve.org/view.php?id=CVE-2019-6223
A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer. Existía un problema de lógica en el manejo de llamadas FaceTime grupales. • https://support.apple.com/HT209520 https://support.apple.com/HT209521 •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2019-6220
https://notcve.org/view.php?id=CVE-2019-6220
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.3. An application may be able to read restricted memory. Se abordó una lectura fuera de límites con la mejora de la validación de entradas. Este problema se ha resuelto en macOS Mojave 10.14.3. • http://www.securityfocus.com/bid/106693 https://support.apple.com/HT209446 • CWE-125: Out-of-bounds Read •
CVSS: 10.0EPSS: 2%CPEs: 5EXPL: 0CVE-2019-6235
https://notcve.org/view.php?id=CVE-2019-6235
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions. Un problema de corrupción de memoria se abordó con una validación mejorada. Este problema se soluciona en iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2 y en watchOS 5.1.2 y iTunes 12.9.3 para Windows. • http://www.securityfocus.com/bid/106724 https://support.apple.com/HT209443 https://support.apple.com/HT209446 https://support.apple.com/HT209447 https://support.apple.com/HT209448 https://support.apple.com/HT209450 • CWE-787: Out-of-bounds Write •