Open Pulse Secure to configure it for your first use: Windows: In your task bar, click the Pulse Secure icon. MacOS: In the menu bar, click the Pulse Secure icon. Alternatively, find and click the Pulse Secure icon in your Applications folder. (If you have trouble finding a Pulse Secure folder, check for one named Junos Pulse Secure.). Mac OS (Qualified) macOS 10.15.1,64 bit macOS 10.14, 64 bit. Download Pulse Secure Package from Service portal or Download from the new staging PCS.

• Download Pulse Secure For Mac 10.15 Full
• Download Pulse Secure For Mac 10.15 Download
• Download Pulse Secure For Mac 10.15 Crack
• How To Download Pulse Secure On Mac

This article covers how students, faculty, and staff install the Pulse Secure VPN client on Mac OS X 10.13 or macOS 10.14 and higher.

If you need assistance or if you are not running MacOS 10.13 or higher, submit a support ticket to the Technology Support Center.

Receiver for Mac. Beginning August 2018, Citrix Receiver will be replaced by Citrix Workspace app. While you can still download older versions of Citrix Receiver, new features and enhancements will be released for Citrix Workspace app. Citrix Workspace app is a new client from Citrix that works similar to Citrix Receiver and is fully backward. Download the Pulse Secure Client. Download the Pulse Secure Client for Mac from the Smith Software site. Scroll down to the Misc. Double-click the plusev5.pkg to start the install. Accept the defaults and if prompted, enter for your username and password to install new software. Restart your computer.

Choose your OS

Mac OS 11 Upgrade

Mac users who upgrade to the latest version of macOS 11 (Big Sur) should uninstall the Pulse Secure client prior to the upgrade and then install the latest version available after the macOS upgrade is complete. Use the 'Simple Removal' instructions on the Removing the Pulse Secure Desktop Client guide.

If you upgrade to macOS 11 (Big Sur) ) with a version of Pulse Secure older than 9.1.9 installed it can cause a Mac running Big Sur to crash and restart 4-5 times before recovering.

1. Download the Pulse Secure Desktop client for Mac OS 11.
2. Click on the file to extract the installer.
3. Double click on the pkg file to initiate the install process.
4. Once the installer begins, click Continue.
5. Click Install to begin the installation.

You may encounter several popups during and after the install process when attempting to connect to the UConn network.

System Extension AND Network Content Filtering:

This prompt below will pop up after installation (If your Mac is managed by ITS you will not see this pop up).

1. Click Ok
   
2. Click the lock in the bottom left corner to make changes (You will be prompted for your user password).
   
3. Click Allow

Filter Network Content:

This prompt will popup during the connection process the first time press Allow; if you do not press Allow the VPN will not work correctly. *If you do not see this prompt, see the below fix.

If you don't press anything or if you press Don't Allow you will soon see this popup:

Press Retry and then press Allow when the popup pictured above re-appears.

*If the 'Filter Network Content' prompt does not appear:

1. Quit the Pulse Secure app.
2. Navigate to Apple menu > System Preferences > Network
3. Select Pulse Secure in the left-hand menu and click the minus button ( - ) to remove it.
4. Open the Pulse Secure app again and connect to the VPN. The Filter Network Content prompt shown above should now appear. If it does not, repeat this process and try again.

1. Download the Pulse Secure Desktop client for Mac OS.
2. Click on the file to extract the installer.
3. Double click on the pkg file to initiate the install process.
4. Review the following warning, select 'OK'
   
5. Click on the Apple icon in the top-left of your screen. Choose System Preferences > Security & Privacy > General
6. Find the warning 'PulseSecure.pkg' was blocked from use because it is not from an identified developer.' Select 'Open Anyway'
   
7. Review the following warning, select 'Open'.
   
8. Run through the installation process.

1. Download the Pulse Secure Desktop client for Mac OS X.
2. Click on the file to extract the installer.
3. Double click on the pkg file to initiate the install process.
4. Once the installer begins, click Continue.
5. Click Install to begin the installation.
6. During the installation process you should expect to see several pop-up messages informing you of security steps that need to be taken to complete the install.
   1. Click OK on the first two messages.
      
   2. Click 'Open Security Preferences' in the third message to open up the 'Security & Privacy' settings window.
      
7. Once the Security & Privacy window has opened, look for the following message: System software from developer 'Pulse Secure LLC' was blocked from loading.
8. Next to the message, click Allow to enable the extension.
   

9. If you do not receive the above mentioned pop-up messages, you will need to manually permit the Pulse Secure Client the required access.

   If you wait longer than 30 minutes to complete this process, you will need to uninstall and reinstall the client and then follow this process again.
   1. To manually permit access to the client,
      1. Click the Apple menu at the top left of your desktop.
      2. Click System Preferences.
      3. Click Security & Privacy.
      4. Click the lock to make changes.
      5. Click the General tab.
      6. Under Allow apps downloaded from, select App Store and identified developers
      7. Look for the following message: System software from developer 'Pulse Secure LLC' was blocked from loading.
      8. Next to the message, click Allow to enable the extension.
         
10. Close the Security & Privacy window. The kernel extension will have been authorized and full functionality of the Pulse Desktop client should be available.

Configuring the Pulse Secure VPN Client after installation is complete

1. Open the Pulse Secure client, which should be shown at the top right corner of the screen.
   
2. Create a new connection using the + in the bottom left corner.
   
3. Enter the following info:
• Connection name of your choosing
• The server URL, vpn.uconn.edu
4. Click Add.
   
5. Close the client.
6. To start the VPN session, go back to the Pulse Secure client in the top right corner of the screen.
   1. Select the connection you created.
   2. Select Connect.
      
7. When prompted for a username and password, enter your NetID and NetID password.
8. When attempting to connect, you may receive the following prompt. Select 'Open Security Preferences'.
   
9. Within 'Security Preferences', select the lock on the bottom left corner. Once unlocked, select Allow, for the system to allow Pulse Secure to load.
   

10. Once you receive this prompt, select Allow to allow Pulse to operate. After this, you should be all set to connect via Pulse Secure. *If you do not see this prompt, see the below fix.
    

    *If the 'Filter Network Content' prompt does not appear:

    1. Quit the Pulse Secure app.

    2. Navigate to Apple menu > System Preferences > Network

    3. Select Pulse Secure in the left-hand menu and click the minus button ( - ) to remove it.

    4. Open the Pulse Secure app again and connect to the VPN. The Filter Network Content prompt shown above should now appear. If it does not, repeat this process and try again.

Related Articles

About Apple security updates

For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page.

Apple security documents reference vulnerabilities by CVE-ID when possible.

For more information about security, see the Apple Product Security page.

Download Pulse Secure For Mac 10.15 Full

macOS Catalina 10.15

Released October 7, 2019

AMD

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: An application may be able to execute arbitrary code with kernel privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2019-8748: Lilang Wu and Moony Li of TrendMicro Mobile Security Research Team

apache_mod_php

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: Multiple issues in PHP

Description: Multiple issues were addressed by updating to PHP version 7.3.8.

CVE-2019-11041

CVE-2019-11042

Audio

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: Processing a maliciously crafted audio file may lead to arbitrary code execution

Description: A memory corruption issue was addressed with improved state management.

CVE-2019-8706: Yu Zhou of Ant-Financial Light-Year Security Lab

Entry added October 29, 2019

Audio

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: Processing a maliciously crafted audio file may disclose restricted memory

Description: An out-of-bounds read was addressed with improved input validation.

CVE-2019-8850: Anonymous working with Trend Micro Zero Day Initiative

Entry added December 4, 2019

Books

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: Parsing a maliciously crafted iBooks file may lead to a persistent denial-of-service

Description: A resource exhaustion issue was addressed with improved input validation.

CVE-2019-8774: Gertjan Franken imec-DistriNet of KU Leuven

Entry added October 29, 2019

CFNetwork

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: Processing maliciously crafted web content may lead to a cross site scripting attack

Description: This issue was addressed with improved checks.

CVE-2019-8753: Łukasz Pilorz of Standard Chartered GBS Poland

Entry added October 29, 2019

CoreAudio

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: Processing a maliciously crafted movie may result in the disclosure of process memory

Description: A memory corruption issue was addressed with improved validation.

CVE-2019-8705: riusksk of VulWar Corp working with Trend Micro's Zero Day Initiative

CoreAudio

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: Playing a malicious audio file may lead to arbitrary code execution

Description: A memory corruption issue was addressed with improved input validation.

CVE-2019-8592: riusksk of VulWar Corp working with Trend Micro's Zero Day Initiative

Entry added November 6, 2019

CoreCrypto

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: Processing a large input may lead to a denial of service

Description: A denial of service issue was addressed with improved input validation.

CVE-2019-8741: Nicky Mouha of NIST

Entry added October 29, 2019

CoreMedia

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: Processing maliciously crafted web content may lead to arbitrary code execution

Description: A memory corruption issue was addressed with improved state management.

CVE-2019-8825: Found by GWP-ASan in Google Chrome

Entry added October 29, 2019

Crash Reporter

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: The 'Share Mac Analytics' setting may not be disabled when a user deselects the switch to share analytics

Description: A race condition existed when reading and writing user preferences. This was addressed with improved state handling.

CVE-2019-8757: William Cerniuk of Core Development, LLC

CUPS

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: An attacker in a privileged network position may be able to leak sensitive user information

Description: An input validation issue was addressed with improved input validation.

CVE-2019-8736: Pawel Gocyla of ING Tech Poland (ingtechpoland.com)

Entry added October 29, 2019

CUPS

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: Processing a maliciously crafted string may lead to heap corruption

Description: A memory consumption issue was addressed with improved memory handling.

CVE-2019-8767: Stephen Zeisberg

Entry added October 29, 2019

CUPS

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: An attacker in a privileged position may be able to perform a denial of service attack

Description: A denial of service issue was addressed with improved validation.

CVE-2019-8737: Pawel Gocyla of ING Tech Poland (ingtechpoland.com)

Entry added October 29, 2019

dyld

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: An application may be able to execute arbitrary code with system privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2019-8776: Jann Horn of Google Project Zero

Entry added February 3, 2020

File Quarantine

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: A malicious application may be able to elevate privileges

Description: This issue was addressed by removing the vulnerable code.

CVE-2019-8509: CodeColorist of Ant-Financial LightYear Labs

Entry added October 29, 2019

Foundation

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution

Description: An out-of-bounds read was addressed with improved input validation.

CVE-2019-8746: natashenka and Samuel Groß of Google Project Zero

Entry added October 29, 2019

Graphics

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: Processing a malicious shader may result in unexpected application termination or arbitrary code execution

Description: Multiple memory corruption issues were addressed with improved input validation.

CVE-2018-12152: Piotr Bania of Cisco Talos

CVE-2018-12153: Piotr Bania of Cisco Talos

CVE-2018-12154: Piotr Bania of Cisco Talos

Entry added October 29, 2019

IOGraphics

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: A local user may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2019-8759: another of 360 Nirvan Team

Entry added October 29, 2019

Intel Graphics Driver

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: An application may be able to execute arbitrary code with system privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2019-8758: Lilang Wu and Moony Li of Trend Micro

IOGraphics

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: A malicious application may be able to determine kernel memory layout

Description: A logic issue was addressed with improved restrictions.

CVE-2019-8755: Lilang Wu and Moony Li of Trend Micro

Kernel

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: An application may be able to gain elevated privileges

Description: This issue was addressed with improved entitlements.

CVE-2019-8703: an anonymous researcher

Entry added March 16, 2021

Kernel

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: A local app may be able to read a persistent account identifier

Description: A validation issue was addressed with improved logic.

CVE-2019-8809: Apple

Entry added October 29, 2019

Kernel

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: A malicious application may be able to determine kernel memory layout

Description: A memory corruption issue existed in the handling of IPv6 packets. This issue was addressed with improved memory management.

CVE-2019-8744: Zhuo Liang of Qihoo 360 Vulcan Team

Entry added October 29, 2019

Kernel

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: An application may be able to execute arbitrary code with kernel privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2019-8717: Jann Horn of Google Project Zero

Kernel

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: An application may be able to execute arbitrary code with kernel privileges

Description: A memory corruption issue was addressed with improved state management.

CVE-2019-8709: derrek (@derrekr6) derrek (@derrekr6)

CVE-2019-8781: Linus Henze (pinauten.de)

Entry updated October 29, 2019

libxml2

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: Multiple issues in libxml2

Description: Multiple memory corruption issues were addressed with improved input validation.

CVE-2019-8749: found by OSS-Fuzz

CVE-2019-8756: found by OSS-Fuzz

Entry added October 29, 2019

libxslt

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: Multiple issues in libxslt

Description: Multiple memory corruption issues were addressed with improved input validation.

CVE-2019-8750: found by OSS-Fuzz

Entry added October 29, 2019

mDNSResponder

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: An attacker in physical proximity may be able to passively observe device names in AWDL communications

Description: This issue was resolved by replacing device names with a random identifier.

CVE-2019-8799: David Kreitschmann and Milan Stute of Secure Mobile Networking Lab at Technische Universität Darmstadt

Entry added October 29, 2019

Menus

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: Processing maliciously crafted web content may lead to arbitrary code execution

Description: A memory corruption issue was addressed with improved state management.

CVE-2019-8826: Found by GWP-ASan in Google Chrome

Entry added October 29, 2019

Notes

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: A local user may be able to view a user’s locked notes

Description: The contents of locked notes sometimes appeared in search results. This issue was addressed with improved data cleanup.

CVE-2019-8730: Jamie Blumberg (@jamie_blumberg) of Virginia Polytechnic Institute and State University

PDFKit

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: An attacker may be able to exfiltrate the contents of an encrypted PDF

Description: An issue existed in the handling of links in encrypted PDFs. This issue was addressed by adding a confirmation prompt.

CVE-2019-8772: Jens Müller of Ruhr University Bochum, Fabian Ising of FH Münster University of Applied Sciences, Vladislav Mladenov of Ruhr University Bochum, Christian Mainka of Ruhr University Bochum, Sebastian Schinzel of FH Münster University of Applied Sciences, and Jörg Schwenk of Ruhr University Bochum

PluginKit

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: A local user may be able to check for the existence of arbitrary files

Description: A logic issue was addressed with improved restrictions.

CVE-2019-8708: an anonymous researcher

Entry added October 29, 2019

PluginKit

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: An application may be able to execute arbitrary code with system privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2019-8715: an anonymous researcher

Entry added October 29, 2019

Sandbox

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: A malicious application may be able to access restricted files

Description: An access issue was addressed with additional sandbox restrictions.

CVE-2019-8855: Apple

Entry added December 18, 2019

SharedFileList

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: A malicious application may be able to access recent documents

Description: The issue was addressed with improved permissions logic.

CVE-2019-8770: Stanislav Zinukhov of Parallels International GmbH

sips

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: An application may be able to execute arbitrary code with system privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2019-8701: Simon Huang(@HuangShaomang), Rong Fan(@fanrong1992) and pjf of IceSword Lab of Qihoo 360

UIFoundation

Download Pulse Secure For Mac 10.15 Download

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: Parsing a maliciously crafted text file may lead to disclosure of user information

Description: This issue was addressed with improved checks.

CVE-2019-8761: Renee Trisberg of SpectX

Entry updated August 10, 2020, updated July 21, 2021

UIFoundation

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: Processing a maliciously crafted text file may lead to arbitrary code execution

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2019-8745: riusksk of VulWar Corp working with Trend Micro's Zero Day Initiative

UIFoundation

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: An application may be able to execute arbitrary code with system privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2019-8831: riusksk of VulWar Corp working with Trend Micro's Zero Day Initiative

Entry added November 18, 2019

WebKit

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Download Pulse Secure For Mac 10.15 Crack

Impact: Visiting a maliciously crafted website may reveal browsing history

Description: An issue existed in the drawing of web page elements. The issue was addressed with improved logic.

CVE-2019-8769: Piérre Reimertz (@reimertz)

WebKit

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: A user may be unable to delete browsing history items

Description: 'Clear History and Website Data' did not clear the history. The issue was addressed with improved data deletion.

CVE-2019-8768: Hugo S. Diaz (coldpointblue)

Wi-Fi

Available for: MacBook (Early 2015 and later), MacBook Air (Mid 2012 and later), MacBook Pro (Mid 2012 and later), Mac mini (Late 2012 and later), iMac (Late 2012 and later), iMac Pro (all models), Mac Pro (Late 2013 and later)

Impact: A device may be passively tracked by its Wi-Fi MAC address

Description: A user privacy issue was addressed by removing the broadcast MAC address.

CVE-2019-8854: FuriousMacTeam of the United States Naval Academy and the Mitre Cooperation, Ta-Lun Yen of UCCU Hacker

Entry added December 4, 2019, updated December 18, 2019

Additional recognition

AppleRTC

We would like to acknowledge Vitaly Cheptsov for their assistance.

Entry added October 29, 2019

Audio

We would like to acknowledge riusksk of VulWar Corp working with Trend Micro's Zero Day Initiative for their assistance.

Entry added October 29, 2019

How To Download Pulse Secure On Mac

boringssl

We would like to acknowledge Nimrod Aviram of Tel Aviv University, Robert Merget of Ruhr University Bochum, Juraj Somorovsky of Ruhr University Bochum, Thijs Alkemade (@xnyhps) of Computest for their assistance.

Entry added October 8, 2019, updated October 29, 2019

curl

We would like to acknowledge Joseph Barisa of The School District of Philadelphia for their assistance.

Entry added February 3, 2020, updated February 11, 2020

Finder

We would like to acknowledge Csaba Fitzl (@theevilbit) for their assistance.

Gatekeeper

We would like to acknowledge Csaba Fitzl (@theevilbit) for their assistance.

Identity Service

We would like to acknowledge Yiğit Can YILMAZ (@yilmazcanyigit) for their assistance.

Entry added October 29, 2019

Kernel

We would like to acknowledge Brandon Azad of Google Project Zero, Vlad Tsyrklevich for their assistance.

Entry updated July 28, 2020

Local Authentication

We would like to acknowledge Ryan Lopopolo for their assistance.

Entry added February 3, 2020

mDNSResponder

We would like to acknowledge Gregor Lang of e.solutions GmbH for their assistance.

Entry added October 29, 2019

python

We would like to acknowledge an anonymous researcher for their assistance.

Entry added October 29, 2019

Safari Data Importing

We would like to acknowledge Kent Zoya for their assistance.

Security

We would like to acknowledge Pepijn Dutour Geerling (pepijn.io), an anonymous researcher for their assistance.

Entry added November 18, 2019

Simple certificate enrollment protocol (SCEP)

We would like to acknowledge an anonymous researcher for their assistance.

Siri

We would like to acknowledge Yuval Ron, Amichai Shulman and Eli Biham of Technion of Israel Institute of Technology for their assistance.

Entry added December 4, 2019, updated December 18, 2019

Telephony

We would like to acknowledge Phil Stokes of SentinelOne for their assistance.

VPN

We would like to acknowledge Royce Gawron of Second Son Consulting, Inc. for their assistance.

Entry added October 29, 2019