Multiple vulnerabilities in Apple macOS

1) Memory corruption

EUVDB-ID: #VU17147

Risk: Low

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2019-6235

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a remote attacker to bypass security restrictions.

The weakness exists due to a boundary error in the AppleKeyStore component when handling malicious input. A remote attacker can trigger memory corruption to circumvent sandbox restrictions.

Update to version 10.14.3.

macOS: 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Out-of-bounds read

EUVDB-ID: #VU17143

Risk: Low

CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2019-6200

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a remote authenticated attacker to cause DoS condition.

The weakness exists due to out-of-bounds read in the Bluetooth component when handling malicious input. A remote authenticated attacker can supply specially crafted input and cause the service to crash.

Update to version 10.14.3.

macOS: 10.13.6 17G66 - 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Out-of-bounds read

EUVDB-ID: #VU17148

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2019-6202

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local authenticated attacker to gain elevated privileges.

The weakness exists due to out-of-bounds read in the Core Media component when handling malicious input. A local authenticated attacker can run a specially crafted application and gain elevated privileges.

Update to version 10.14.3.

macOS: 10.13.6 17G66 - 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Out-of-bounds read

EUVDB-ID: #VU17149

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2019-6221

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local authenticated attacker to gain elevated privileges.

The weakness exists due to out-of-bounds read in the Core Media component when handling malicious input. A local authenticated attacker can run a specially crafted application and gain elevated privileges.

Update to version 10.14.3.

macOS: 10.13.6 17G66 - 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Out-of-bounds read

EUVDB-ID: #VU17150

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2019-6231

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local authenticated attacker to obtain potentially sensitive information.

The weakness exists due to out-of-bounds read in the CoreAnimation component when handling malicious input. A local authenticated attacker can run a specially crafted application and access arbitrary data.

Update to version 10.14.3.

macOS: 10.12.6 16G29 - 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Memory corruption

EUVDB-ID: #VU17151

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2019-6230

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local authenticated attacker to bypass security restrictions.

The weakness exists due to a boundary error in the CoreAnimation component when handling malicious input. A local attacker can run a specially crafted application, trigger memory corruption and circumvent sandbox restrictions.

Update to version 10.14.3.

macOS: 10.12.6 16G29 - 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Buffer overflow

EUVDB-ID: #VU17152

Risk: High

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2019-6224

CWE-ID: CWE-120 - Buffer overflow

Exploit availability: No

The vulnerability allows a remote attacker to execute arbitrary code.

The weakness exists due to a boundary error in the FaceTime component when handling malicious input. A remote attacker can initiate a FaceTime call, trigger memory corruption and execute arbitrary code with elevated privileges.

Successful exploitation of the vulnerability may result in system compromise.

Update to version 10.14.3.

macOS: 10.13.6 17G66 - 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Type confusion

EUVDB-ID: #VU17153

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2019-6214

CWE-ID: CWE-843 - Type confusion

Exploit availability: No

The vulnerability allows a local authenticated attacker to bypass security restrictions.

The weakness exists due to a boundary error in the IOKit component when handling malicious input. A local attacker can run a specially crafted application, trigger type confusion error and circumvent sandbox restrictions.

Update to version 10.14.3.

macOS: 10.12.6 16G29 - 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Memory corruption

EUVDB-ID: #VU17154

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2019-6225

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local authenticated attacker to gain elevated privileges.

The weakness exists due to a boundary error in the Kernel component when handling malicious input. A local authenticated attacker can run a specially crafted application, trigger memory corruption and gain elevated privileges.

Update to version 10.14.3.

macOS: 10.12.6 16G29 - 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Privilege escalation

EUVDB-ID: #VU17144

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2019-6210

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local authenticated attacker to gain elevated privileges.

The weakness exists due to an error in the Kernel component when handling malicious input. A local authenticated attacker can run a specially crafted application and execute arbitrary code with kernel privileges.

Successful exploitation of the vulnerability may result in system compromise.

Update to version 10.14.3.

macOS: 10.12.6 16G29 - 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Memory corruption

EUVDB-ID: #VU17155

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2019-6205

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local authenticated attacker to bypass security restrictions.

The weakness exists due to lock state checking in the Kernel component when handling malicious input. A local authenticated attacker can run a specially crafted application, trigger memory corruption and cause unexpected changes in memory shared between processes.

Update to version 10.14.3.

macOS: 10.12.6 16G29 - 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Buffer overflow

EUVDB-ID: #VU17145

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2019-6213

CWE-ID: CWE-120 - Buffer overflow

Exploit availability: No

The vulnerability allows a local authenticated attacker to gain elevated privileges.

The weakness exists due to a boundary error in the Kernel component when handling malicious input. A local authenticated attacker can run a specially crafted application, trigger buffer overflow and execute arbitrary code with kernel privileges.

Successful exploitation of the vulnerability may result in system compromise.

Update to version 10.14.3.

macOS: 10.12.6 16G29 - 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Out-of-bounds read

EUVDB-ID: #VU17156

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2019-6209

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local authenticated attacker to obtain potentially sensitive information.

The weakness exists due to out-of-bounds read in the Kernel component when handling malicious input. A local authenticated attacker can run a specially crafted application and determine kernel memory layout.

Update to version 10.14.3.

macOS: 10.13.6 17G66 - 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) Memory corruption

EUVDB-ID: #VU17157

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2019-6208

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local authenticated attacker to bypass security restrictions.

The weakness exists due to lock state checking in the Kernel component when handling malicious input. A local authenticated attacker can run a specially crafted application, trigger memory corruption and cause unexpected changes in memory shared between processes.

Update to version 10.14.3.

macOS: 10.12.6 16G29 - 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Memory corruption

EUVDB-ID: #VU17146

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2019-6218

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local authenticated attacker to gain elevated privileges.

The weakness exists due to a boundary error in the Kernel component when handling malicious input. A local authenticated attacker can run a specially crafted application, trigger memory corruption and execute arbitrary code with kernel privileges.

Successful exploitation of the vulnerability may result in system compromise.

Update to version 10.14.3.

macOS: 10.12.6 16G29 - 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) Input validation error

EUVDB-ID: #VU17159

Risk: Low

CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2019-6219

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote attacker to bypass security restrictions.

The weakness exists due to an error in the Natural Language Processing component when handling malicious input. A remote attacker can trick the victim into processing a specially crafted message and cause the service to crash.

Update to version 10.14.3.

macOS: 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Memory corruption

EUVDB-ID: #VU17173

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2019-6211

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a remote attacker to execute arbitrary code.

The weakness exists due to a boundary error in the WebRTC component when handling malicious input. A remote attacker can trick the victim into processing a specially crafted content, trigger memory corruption and execute arbitrary code with elevated privileges.

Successful exploitation of the vulnerability may result in system compromise.

Update to version 10.14.3.

macOS: 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) SQL injection

EUVDB-ID: #VU17162

Risk: Low

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2018-20346

CWE-ID: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Exploit availability: No

The vulnerability allows a remote attacker to execute arbitrary SQL queries in database.

The vulnerability exists due to insufficient sanitization of user-supplied data in the SQLite component. A remote attacker can send a specially specially crafted request to the affected application and execute arbitrary SQL commands within the application database.

Successful exploitation of this vulnerability may allow a remote attacker to read, delete, modify data in database and gain complete control over the affected application.

Update to version 10.14.3.

macOS: 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

19) SQL injection

EUVDB-ID: #VU17164

Risk: Low

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2018-20506

CWE-ID: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Exploit availability: No

The vulnerability allows a remote attacker to execute arbitrary SQL queries in database.

The vulnerability exists due to insufficient sanitization of user-supplied data in the SQLite component. A remote attacker can send a specially specially crafted request to the affected application and execute arbitrary SQL commands within the application database.

Successful exploitation of this vulnerability may allow a remote attacker to read, delete, modify data in database and gain complete control over the affected application.

Update to version 10.14.3.

macOS: 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

20) SQL injection

EUVDB-ID: #VU17163

Risk: Low

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2018-20505

CWE-ID: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Exploit availability: No

The vulnerability allows a remote attacker to execute arbitrary SQL queries in database.

The vulnerability exists due to insufficient sanitization of user-supplied data in the SQLite component. A remote attacker can send a specially specially crafted request to the affected application and execute arbitrary SQL commands within the application database.

Successful exploitation of this vulnerability may allow a remote attacker to read, delete, modify data in database and gain complete control over the affected application.

Update to version 10.14.3.

macOS: 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

21) Memory corruption

EUVDB-ID: #VU17176

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2018-4467

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local authenticated attacker to gain elevated privileges.

The weakness exists due to a boundary error in the Hypervisor component when handling malicious input. A local authenticated attacker can run a specially crafted application, trigger memory corruption and gain elevated privileges.

Update to version 10.14.3.

macOS: 10.12.6 16G29 - 10.13.6 17G66

• cpe:2.3:o:apple:macos:10.13.6:17G66:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

22) Memory corruption

EUVDB-ID: #VU17175

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2018-4452

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local authenticated attacker to gain elevated privileges.

The weakness exists due to a boundary error in the Intel Graphics Driver component when handling malicious input. A local authenticated attacker can run a specially crafted application, trigger memory corruption and execute arbitrary code with system privileges.

Successful exploitation of the vulnerability may result in system compromise.

Update to version 10.14.3.

macOS: 10.12.6 16G29 - 10.13.6 17G66

• cpe:2.3:o:apple:macos:10.13.6:17G66:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

23) Out-of-bounds read

EUVDB-ID: #VU17174

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2019-6220

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local authenticated attacker to obtain potentially sensitive information.

The weakness exists due to out-of-bounds read in the QuartzCore component when handling malicious input. A local authenticated attacker can run a specially crafted application and rear restricted memory.

Update to version 10.14.3.

macOS: 10.12.6 16G29 - 10.14.2 18C54

• cpe:2.3:o:apple:macos:10.14.2:18C54:*:*:*:*:*:*

https://support.apple.com/en-us/HT209446

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.