← Zuruck zu CVEs
CVE-2019-8506
HIGHCISA KEV8.8
Beschreibung
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE Details
CVSS v3.1 Bewertung8.8
SchweregradHIGH
CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AngriffsvektorNETWORK
KomplexitatLOW
Erforderliche PrivilegienNONE
BenutzerinteraktionREQUIRED
Veroffentlicht12/18/2019
Zuletzt geandert10/23/2025
Quellekev
Honeypot-Sichtungen0
CISA KEV
HerstellerApple
ProduktMultiple Products
SchwachstellennameApple Multiple Products Type Confusion Vulnerability
KEV Aufnahmedatum2022-05-04
Behebungsfrist2022-05-25
Ransomware-NutzungUnknown
Betroffene Produkte
apple:icloudapple:iphone_osapple:itunesapple:safariapple:tvosapple:watchosredhat:enterprise_linux_desktopredhat:enterprise_linux_serverredhat:enterprise_linux_workstation
Schwachen (CWE)
CWE-843CWE-843
Referenzen
https://support.apple.com/HT209599(product-security@apple.com)
https://support.apple.com/HT209601(product-security@apple.com)
https://support.apple.com/HT209602(product-security@apple.com)
https://support.apple.com/HT209603(product-security@apple.com)
https://support.apple.com/HT209604(product-security@apple.com)
https://support.apple.com/HT209605(product-security@apple.com)
https://support.apple.com/HT209599(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT209601(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT209602(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT209603(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT209604(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT209605(af854a3a-2127-422b-91ae-364da2661108)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8506(134c704f-9b21-4f2e-91b3-4a467353bcc0)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.