CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2019-8767
https://notcve.org/view.php?id=CVE-2019-8767
A memory consumption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. Processing a maliciously crafted string may lead to heap corruption. Se abordó un problema de consumo de memoria con un manejo de la memoria mejorada. Este problema se corrigió en macOS Catalina versión 10.15.1, Security Update 2019-001 y Security Update 2019-006, macOS Catalina versión 10.15. • https://support.apple.com/en-us/HT210634 https://support.apple.com/en-us/HT210722 • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2019-8801
https://notcve.org/view.php?id=CVE-2019-8801
A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is fixed in macOS Catalina 10.15.1, iTunes for Windows 12.10.2. Running the iTunes installer in an untrusted directory may result in arbitrary code execution. Un problema de carga dinámica de la biblioteca existía en la configuración de iTunes. • https://support.apple.com/HT210722 https://support.apple.com/HT210726 • CWE-426: Untrusted Search Path •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2019-8737
https://notcve.org/view.php?id=CVE-2019-8737
A denial of service issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. An attacker in a privileged position may be able to perform a denial of service attack. Se abordó un problema de denegación de servicio con una comprobación mejorada. Este problema se corrigió en macOS Catalina versión 10.15.1, Security Update 2019-001 y Security Update 2019-006, macOS Catalina versión 10.15. • https://support.apple.com/en-us/HT210634 https://support.apple.com/en-us/HT210722 • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2019-8509
https://notcve.org/view.php?id=CVE-2019-8509
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. A malicious application may be able to elevate privileges. Se abordó un problema al eliminar el código vulnerable.  Este problema se corrigió en macOS Catalina versión 10.15.1, Security Update 2019-001 y Security Update 2019-006, macOS Catalina versión 10.15. • https://support.apple.com/en-us/HT210634 https://support.apple.com/en-us/HT210722 •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2019-8736
https://notcve.org/view.php?id=CVE-2019-8736
An input validation issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. An attacker in a privileged network position may be able to leak sensitive user information. Se abordó un problema de comprobación de entrada con una comprobación de entrada mejorada. Este problema se corrigió en macOS Catalina versión 10.15.1, Security Update 2019-001 y Security Update 2019-006, macOS Catalina versión 10.15. • https://support.apple.com/en-us/HT210634 https://support.apple.com/en-us/HT210722 • CWE-20: Improper Input Validation •