About the security content of macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2019-13118n/a: Access of Resource Using Incompatible Type ('Type Confusion')
• CVE-2019-9506Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation
• CVE-2018-19860n/a: Incorrect Permission Assignment for Critical Resource
• CVE-2018-16860A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode
• CVE-2019-8686Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8657An out-of-bounds read was addressed with improved input validation
• CVE-2019-8694A memory corruption issue was addressed with improved memory handling
• CVE-2019-8697A memory corruption issue was addressed with improved memory handling
• CVE-2019-8690A logic issue existed in the handling of document loads
• CVE-2019-8701A memory corruption issue was addressed with improved memory handling
• CVE-2019-8679Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8683Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8660A remote attacker may be able to cause unexpected application termination or arbitrary code execution
• CVE-2019-8681Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8685Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8644Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8675A buffer overflow issue was addressed with improved memory handling
• CVE-2019-8662An attacker may be able to trigger a use-after-free in an application deserializing an untrusted NSDictionary
• CVE-2019-8667An inconsistent user interface issue was addressed with improved state management
• CVE-2019-8666Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8696A buffer overflow issue was addressed with improved memory handling
• CVE-2019-8672Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8656Extracting a zip file containing a symbolic link to an endpoint in an NFS mount that is attacker controlled may bypass Gatekeeper
• CVE-2019-8687Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8688Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8695A memory corruption issue was addressed with improved memory handling
• CVE-2019-8691A validation issue was addressed with improved input sanitization
• CVE-2019-8648A remote attacker may be able to cause arbitrary code execution
• CVE-2019-8702This issue was addressed with a new entitlement
• CVE-2019-8673Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8684Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8670An inconsistent user interface issue was addressed with improved state management
• CVE-2019-8671Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8693A validation issue was addressed with improved input sanitization
• CVE-2019-8689Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8676Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8680Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8646A remote attacker may be able to leak memory
• CVE-2019-8658A logic issue was addressed with improved state management
• CVE-2019-8692A validation issue was addressed with improved input sanitization
• CVE-2019-8677Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8663A remote attacker may be able to leak memory
• CVE-2019-8649A logic issue existed in the handling of synchronous page loads
• CVE-2019-8678Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8661A remote attacker may be able to cause arbitrary code execution
• CVE-2019-8669Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8539A memory initialization issue was addressed with improved memory handling

Source and provenance

Original title: About the security content of macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra - Apple Support. Captured 16 Oct 2026, 21:42 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.