CVE-2019-8506
high · 8.8Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply updates per vendor instructions.
Added 2022-05-04Remediation due 2022-05-25
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
8.8
CVSS
18.1%
EPSS (exploit prob.)
97th
EPSS percentile
2019-12-18
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-843
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| apple | icloud | < 7.11 |
| apple | itunes | < 12.9.4 |
| apple | safari | < 12.1 |
| apple | iphone_os | < 12.2 |
| apple | tvos | < 12.2 |
| apple | watchos | < 5.2 |
| redhat | enterprise_linux_desktop | 7.0 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_workstation | 7.0 |
Check a specific version with /api/v1/cve/match.
References
- https://support.apple.com/HT209599
- https://support.apple.com/HT209601
- https://support.apple.com/HT209602
- https://support.apple.com/HT209603
- https://support.apple.com/HT209604
- https://support.apple.com/HT209605
- https://support.apple.com/HT209599
- https://support.apple.com/HT209601
- https://support.apple.com/HT209602
- https://support.apple.com/HT209603
- https://support.apple.com/HT209604
- https://support.apple.com/HT209605
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8506
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2019-8506