CVE-2019-7286
high · 7.8Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply updates per vendor instructions.
Added 2022-05-23Remediation due 2022-06-13
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.
7.8
CVSS
15.6%
EPSS (exploit prob.)
97th
EPSS percentile
2019-12-18
Published
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-787
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| apple | iphone_os | < 12.1.4 |
| apple | mac_os_x | < 10.14.3 |
Check a specific version with /api/v1/cve/match.
References
- https://support.apple.com/HT209520
- https://support.apple.com/HT209521
- https://support.apple.com/HT209601
- https://support.apple.com/HT209602
- https://support.apple.com/HT209520
- https://support.apple.com/HT209521
- https://support.apple.com/HT209601
- https://support.apple.com/HT209602
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7286
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2019-7286