CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 1CVE-2019-8781
https://notcve.org/view.php?id=CVE-2019-8781
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with kernel privileges. Un problema de corrupción de memoria fue abordado mejorando la gestión del estado. Este problema es corregido en macOS Catalina versión 10.15. • https://github.com/TrungNguyen1909/CVE-2019-8781-macOS https://support.apple.com/HT210634 • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2019-8758 – Apple macOS AppleIntelCFLGraphicsFramebuffer.kext Untrusted Pointer Dereference Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2019-8758
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with system privileges. Un problema de corrupción de memoria fue abordado mejorando el manejo de la memoria. Este problema es corregido en macOS Catalina versión 10.15. • https://support.apple.com/HT210634 • CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2019-8772
https://notcve.org/view.php?id=CVE-2019-8772
An issue existed in the handling of links in encrypted PDFs. This issue was addressed by adding a confirmation prompt. This issue is fixed in macOS Catalina 10.15. An attacker may be able to exfiltrate the contents of an encrypted PDF. Se presentó un problema en el manejo de enlaces en archivos PDF encriptados. • https://support.apple.com/HT210634 https://support.apple.com/kb/HT210722 •
CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 0CVE-2019-8769 – webkitgtk: Websites could reveal browsing history
https://notcve.org/view.php?id=CVE-2019-8769
An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history. Se presentó un problema en el dibujado de los elementos de una página web. • https://security.gentoo.org/glsa/202003-22 https://support.apple.com/HT210634 https://access.redhat.com/security/cve/CVE-2019-8769 https://bugzilla.redhat.com/show_bug.cgi?id=1876617 •
CVSS: 2.5EPSS: 0%CPEs: 1EXPL: 0CVE-2019-8757
https://notcve.org/view.php?id=CVE-2019-8757
A race condition existed when reading and writing user preferences. This was addressed with improved state handling. This issue is fixed in macOS Catalina 10.15. The "Share Mac Analytics" setting may not be disabled when a user deselects the switch to share analytics. Se presentó una condición de carrera cuando se lee y escribe las preferencias del usuario. • https://support.apple.com/HT210634 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •