Vulnerabilitymedium
Apple May 2019 security updates fix numerous issues
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-14315 | In Apple iOS 7 through 9, due to a BlueBorne flaw in the implementation of LEAP (Low Energy Audio Protocol), a large audio command can be sent to a targeted… | 7.5 | <1% | ||
| CVE-2017-6975 | Wi-Fi in Apple iOS before 10.3.1 does not prevent CVE-2017-6956 stack buffer overflow exploitation via a crafted access point | 6.8 | <1% | PoC | |
| CVE-2017-9417 | Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue | 9.8 | 64% | ||
CVE-2019-8617+3 related CVEs | An access issue was addressed with additional sandbox restrictions | 9.6 group max | 1% | ||
CVE-2019-8634+1 related CVE | An authentication issue was addressed with improved state management | 8.8 group max | <1% | ||
| CVE-2019-8592 | A memory corruption issue was addressed with improved input validation | 7.8 | 1% | ||
| CVE-2019-8605 | Use-After-Free in Apple iOS, macOS, tvOS, watchOS Enables Privileged Code Execution | 7.8 | 18% | KEV | KEV |
From the original article
2 min read at helpnetsecurity.com
Another month, another batch of Apple security updates that users of the firm’s computers, phones, tablets, streaming devices and smart watches will be prompted to implement. As per usual, WebKit – the browser engine used in Apple’s Safari browser and other products – has the most number of flaws fixed.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.