About the security content of macOS Catalina 10.15 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2019-11042heap-buffer-overflow on exif_process_user_comment in EXIF extension
• CVE-2018-12153Intel Corporation Intel Graphics Driver: Improper Input Validation
• CVE-2019-11041heap-buffer-overflow on exif_scan_thumbnail in EXIF extension
• CVE-2018-12154Intel Corporation Intel Graphics Driver: Loop with Unreachable Exit Condition ('Infinite Loop')
• CVE-2018-12152Intel Corporation Intel Graphics Driver: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2019-8854A user privacy issue was addressed by removing the broadcast MAC address
• CVE-2019-8850An out-of-bounds read was addressed with improved input validation
• CVE-2019-8855An access issue was addressed with additional sandbox restrictions
• CVE-2019-8831A memory corruption issue was addressed with improved memory handling
• CVE-2019-8774A resource exhaustion issue was addressed with improved input validation
• CVE-2019-8809A validation issue was addressed with improved logic
• CVE-2019-8776A memory corruption issue was addressed with improved memory handling
• CVE-2019-8825A memory corruption issue was addressed with improved state management
• CVE-2019-8781A memory corruption issue was addressed with improved state management
• CVE-2019-8772An attacker may be able to exfiltrate the contents of an encrypted PDF
• CVE-2019-8826A memory corruption issue was addressed with improved state management
• CVE-2019-8770The issue was addressed with improved permissions logic
• CVE-2019-8767A memory consumption issue was addressed with improved memory handling
• CVE-2019-8768"Clear History and Website Data" did not clear the history
• CVE-2019-8799An attacker in physical proximity may be able to passively observe device names in AWDL communications
• CVE-2019-8769An issue existed in the drawing of web page elements
• CVE-2019-8759An out-of-bounds read was addressed with improved bounds checking
• CVE-2019-8757A race condition existed when reading and writing user preferences
• CVE-2019-8758A memory corruption issue was addressed with improved memory handling
• CVE-2019-8753Processing maliciously crafted web content may lead to a cross site scripting attack
• CVE-2019-8761This issue was addressed with improved checks
• CVE-2019-8755A logic issue was addressed with improved restrictions
• CVE-2019-8756Multiple memory corruption issues were addressed with improved input validation
• CVE-2019-8750Multiple memory corruption issues were addressed with improved input validation
• CVE-2019-8748A memory corruption issue was addressed with improved memory handling
• CVE-2019-8749Multiple memory corruption issues were addressed with improved input validation
• CVE-2019-8745A buffer overflow was addressed with improved bounds checking
• CVE-2019-8744A memory corruption issue existed in the handling of IPv6 packets
• CVE-2019-8746A remote attacker may be able to cause unexpected application termination or arbitrary code execution
• CVE-2019-8709A memory corruption issue was addressed with improved state management
• CVE-2019-8730The contents of locked notes sometimes appeared in search results
• CVE-2019-8708A logic issue was addressed with improved restrictions
• CVE-2019-8737An attacker in a privileged position may be able to perform a denial of service attack
• CVE-2019-8706A memory corruption issue was addressed with improved state management
• CVE-2019-8736An attacker in a privileged network position may be able to leak sensitive user information
• CVE-2019-8701A memory corruption issue was addressed with improved memory handling
• CVE-2019-8703This issue was addressed with improved entitlements
• CVE-2019-8717A memory corruption issue was addressed with improved memory handling
• CVE-2019-8705A memory corruption issue was addressed with improved validation
• CVE-2019-8741A denial of service issue was addressed with improved input validation
• CVE-2019-8715A memory corruption issue was addressed with improved memory handling
• CVE-2019-8592A memory corruption issue was addressed with improved input validation
• CVE-2019-8509This issue was addressed by removing the vulnerable code

Source and provenance

Original title: About the security content of macOS Catalina 10.15 - Apple Support. Captured 16 Oct 2026, 15:22 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.