Approved changes feed: RSS · Atom

cpe:2.3:o:apple:mac_os_x:10.12.6:security_update_2019-001:*:*:*:*:*:*

part: o version: 10.12.6 update: security_update_2019-001

VendorApple (c2b419d0-9f0f-51c1-88dc-2e204a98e1c7)
ProductMac Os X (f0578782-d1e8-5b8d-b127-ce7d4203eaaf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-8702 vulnerable 2026-06-08 05:14:24.428256 Details available
This issue was addressed with a new entitlement. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra, iOS 12.4, tvOS 12.4. A local user may be able to read a persistent account identifier.
Published: 2021-12-23T19:48:31.000Z
Updated: 2024-08-04T21:24:29.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8634 vulnerable 2026-06-08 05:14:24.341448 Details available
An authentication issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5. A user may be unexpectedly logged in to another user’s account.
Published: 2019-12-18T17:33:20.000Z
Updated: 2024-08-04T21:24:29.124Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8550 vulnerable 2026-06-08 05:14:24.235404 Details available
An issue existed in the pausing of FaceTime video. The issue was resolved with improved logic. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, watchOS 5.2. A user’s video may not be paused in a FaceTime call if they exit the FaceTime app while the call is ringing.
Published: 2019-12-18T17:33:17.000Z
Updated: 2024-08-04T21:24:28.311Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13118 vulnerable 2026-06-08 05:12:40.943306 Details available
In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data.
Published: 2019-07-01T01:27:39.000Z
Updated: 2026-05-28T18:36:48.291Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.