← Voltar para CVEs
CVE-2019-8506
HIGHCISA KEV8.8
Descricao
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
Detalhes CVE
Pontuacao CVSS v3.18.8
SeveridadeHIGH
Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vetor de ataqueNETWORK
ComplexidadeLOW
Privilegios necessariosNONE
Interacao do usuarioREQUIRED
Publicado12/18/2019
Ultima modificacao10/23/2025
Fontekev
Avistamentos honeypot0
CISA KEV
FornecedorApple
ProdutoMultiple Products
Nome da vulnerabilidadeApple Multiple Products Type Confusion Vulnerability
Data inclusao KEV2022-05-04
Prazo de remediacao2022-05-25
Uso em ransomwareUnknown
Produtos afetados
apple:icloudapple:iphone_osapple:itunesapple:safariapple:tvosapple:watchosredhat:enterprise_linux_desktopredhat:enterprise_linux_serverredhat:enterprise_linux_workstation
Fraquezas (CWE)
CWE-843CWE-843
Referencias
https://support.apple.com/HT209599(product-security@apple.com)
https://support.apple.com/HT209601(product-security@apple.com)
https://support.apple.com/HT209602(product-security@apple.com)
https://support.apple.com/HT209603(product-security@apple.com)
https://support.apple.com/HT209604(product-security@apple.com)
https://support.apple.com/HT209605(product-security@apple.com)
https://support.apple.com/HT209599(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT209601(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT209602(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT209603(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT209604(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT209605(af854a3a-2127-422b-91ae-364da2661108)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8506(134c704f-9b21-4f2e-91b3-4a467353bcc0)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.