CVE-2019-8685

CVE-2019-8685: vulnerability in Apple iOS

Published 18 Dec 2019 · Updated 04 Aug 2024

Follow this CVE + Monitor macOS + Monitor iOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.3%

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Affected products

Apple · iCloud for Windows Apple · iCloud for Windows (Microsoft Store)Apple · iOS Apple · iTunes for Windows Apple · macOS Apple · Safari Apple · tvOS Apple · watchOS

Related CVEs — Apple iOS

In the same product, most dangerous first.

CVE-2021-30860HIGHCVE-2021-30860EPSS 76.0%KEV CVE-2019-8605HIGHCVE-2019-8605EPSS 17.6%KEV CVE-2019-8506HIGHCVE-2019-8506EPSS 16.2%KEV CVE-2019-7286HIGHCVE-2019-7286EPSS 15.9%KEV CVE-2020-3837HIGHCVE-2020-3837EPSS 14.8%KEV CVE-2021-30858HIGHCVE-2021-30858EPSS 13.4%KEV

References

https://support.apple.com/HT210346 https://support.apple.com/HT210348 https://support.apple.com/HT210351 https://support.apple.com/HT210353 https://support.apple.com/HT210355 https://support.apple.com/HT210356 https://support.apple.com/HT210357 https://support.apple.com/HT210358