CVE-2019-8672
high · 8.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
8.8
CVSS
11.0%
EPSS (exploit prob.)
96th
EPSS percentile
2019-12-18
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-787
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| apple | icloud | < 7.13 |
| apple | icloud | >= 10.0, < 10.6 |
| apple | itunes | < 12.9.6 |
| apple | safari | < 12.1.2 |
| apple | iphone_os | < 12.4 |
| apple | mac_os_x | < 10.14.6 |
| apple | tvos | < 12.4 |
| apple | watchos | < 5.3 |
| redhat | enterprise_linux_desktop | 7.0 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_workstation | 7.0 |
Check a specific version with /api/v1/cve/match.
References
- https://support.apple.com/HT210346
- https://support.apple.com/HT210348
- https://support.apple.com/HT210351
- https://support.apple.com/HT210353
- https://support.apple.com/HT210355
- https://support.apple.com/HT210356
- https://support.apple.com/HT210357
- https://support.apple.com/HT210358
- https://support.apple.com/HT210346
- https://support.apple.com/HT210348
- https://support.apple.com/HT210351
- https://support.apple.com/HT210353
- https://support.apple.com/HT210355
- https://support.apple.com/HT210356
- https://support.apple.com/HT210357
- https://support.apple.com/HT210358
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2019-8672