About the security content of macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2019-8906do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused
• CVE-2019-8526Apple macOS Use-After-Free Vulnerability
• CVE-2018-18311Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations
• CVE-2018-18313Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory
• CVE-2018-12015n/a: Improper Link Resolution Before File Access ('Link Following')
• CVE-2018-4448A memory initialization issue was addressed with improved memory handling
• CVE-2018-4433A configuration issue was addressed with additional restrictions
• CVE-2019-8777A lock screen issue allowed access to contacts on a locked device
• CVE-2019-8642An issue existed in the handling of S-MIME certificates
• CVE-2019-8645An attacker in a privileged network position may be able to intercept the contents of S/MIME-encrypted e-mail
• CVE-2019-8564An attacker in a privileged network position can modify driver state
• CVE-2019-8569A memory corruption issue was addressed with improved memory handling
• CVE-2019-8546An access issue was addressed with additional sandbox restrictions
• CVE-2019-8612An attacker in a privileged network position can modify driver state
• CVE-2019-8579An input validation issue was addressed with improved memory handling
• CVE-2019-8618A logic issue was addressed with improved restrictions
• CVE-2019-8565A race condition was addressed with additional validation
• CVE-2019-8561A logic issue was addressed with improved validation
• CVE-2019-8550An issue existed in the pausing of FaceTime video
• CVE-2019-8567A user privacy issue was addressed by removing the broadcast MAC address
• CVE-2019-8552A memory initialization issue was addressed with improved memory handling
• CVE-2019-8540A memory initialization issue was addressed with improved memory handling
• CVE-2019-8549Multiple input validation issues existed in MIG generated code
• CVE-2019-8555A buffer overflow was addressed with improved size validation
• CVE-2019-8529A memory corruption issue was addressed with improved input validation
• CVE-2019-8545A memory corruption issue was addressed with improved state management
• CVE-2019-8542A buffer overflow was addressed with improved bounds checking
• CVE-2019-8547A remote attacker may be able to leak memory
• CVE-2019-8537An access issue was addressed with improved memory management
• CVE-2019-8538A denial of service issue was addressed with improved validation
• CVE-2019-8530This issue was addressed with improved checks
• CVE-2019-8531A validation issue existed in Trust Anchor Management
• CVE-2019-8534A logic issue existed resulting in memory corruption
• CVE-2019-8533A lock handling issue was addressed with improved lock handling
• CVE-2019-8519An out-of-bounds read was addressed with improved bounds checking
• CVE-2019-8522A logic issue was addressed with improved state management
• CVE-2019-8520An out-of-bounds read was addressed with improved bounds checking
• CVE-2019-8527A buffer overflow was addressed with improved size validation
• CVE-2019-8525A memory corruption issue was addressed with improved state management
• CVE-2019-8521This issue was addressed with improved checks
• CVE-2019-8516A validation issue was addressed with improved logic
• CVE-2019-8517An out-of-bounds read was addressed with improved bounds checking
• CVE-2019-8513This issue was addressed with improved checks
• CVE-2019-8508A buffer overflow was addressed with improved bounds checking
• CVE-2019-8504A memory initialization issue was addressed with improved memory handling
• CVE-2019-8507Multiple memory corruption issues were addressed with improved input validation
• CVE-2019-8502An API issue existed in the handling of dictation requests
• CVE-2019-8528A use after free issue was addressed with improved memory management
• CVE-2019-8514A logic issue was addressed with improved state management
• CVE-2019-8510An out-of-bounds read issue existed that led to the disclosure of kernel memory

Source and provenance

Original title: About the security content of macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra - Apple Support. Captured 16 Oct 2026, 21:42 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.