CVE-2019-8638

CVE-2019-8638: vulnerability in Apple watchOS

Published 27 Oct 2020 · Updated 04 Aug 2024

Follow this CVE + Monitor iOS + Monitor watchOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 5.2, iCloud for Windows 7.11, iOS 12.2, iTunes 12.9.4 for Windows, Safari 12.1. Processing maliciously crafted web content may lead to arbitrary code execution.

Affected products

Apple · iCloud for Windows Apple · iOS Apple · iTunes for Windows Apple · Safari Apple · watchOS

Related CVEs — Apple watchOS

In the same product, most dangerous first.

CVE-2021-30860HIGHCVE-2021-30860EPSS 76.0%KEV CVE-2019-8605HIGHCVE-2019-8605EPSS 17.6%KEV CVE-2019-8506HIGHCVE-2019-8506EPSS 16.2%KEV CVE-2019-7286HIGHCVE-2019-7286EPSS 15.9%KEV CVE-2020-3837HIGHCVE-2020-3837EPSS 14.8%KEV CVE-2021-30858HIGHCVE-2021-30858EPSS 13.4%KEV

References

https://support.apple.com/en-us/HT209599 https://support.apple.com/en-us/HT209602 https://support.apple.com/en-us/HT209603 https://support.apple.com/en-us/HT209604 https://support.apple.com/en-us/HT209605