CVE-2019-7285

CVE-2019-7285: vulnerability in Apple iOS

Published 18 Dec 2019 · Updated 04 Aug 2024

Follow this CVE + Monitor iOS + Monitor tvOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.1%

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

Affected products

Apple · iCloud for Windows Apple · iOS Apple · iTunes for Windows Apple · Safari Apple · tvOS

Related CVEs — Apple iOS

In the same product, most dangerous first.

CVE-2021-30860HIGHCVE-2021-30860EPSS 76.0%KEV CVE-2019-8605HIGHCVE-2019-8605EPSS 17.6%KEV CVE-2019-8506HIGHCVE-2019-8506EPSS 16.2%KEV CVE-2019-7286HIGHCVE-2019-7286EPSS 15.9%KEV CVE-2020-3837HIGHCVE-2020-3837EPSS 14.8%KEV CVE-2021-30858HIGHCVE-2021-30858EPSS 13.4%KEV

References

https://support.apple.com/HT209599 https://support.apple.com/HT209601 https://support.apple.com/HT209603 https://support.apple.com/HT209604 https://support.apple.com/HT209605