Veille CVE

Décembre 2019

4 CVE sur 7

  1. CVE-2019-8605 7.8 Élevée Exploitée

    Apple iOS · Apple macOS · Apple tvOS · Apple watchOS

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

  2. CVE-2019-8526 7.8 Élevée Exploitée

    Apple macOS · Apple mac os x

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.

  3. CVE-2019-8506 8.8 Élevée Exploitée

    Apple iOS · Apple tvOS · Apple watchOS · Apple Safari

    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

  4. CVE-2019-1458 7.8 Élevée Exploitée Rançongiciel

    Microsoft Windows · Microsoft Windows Server · Microsoft windows 10 1507 · Microsoft windows 10 1607

    An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.