8.8
Élevée
Exploitée
CVE-2019-8506 Apple Multiple Products Type Confusion Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-843
Description
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| iOS | Versions non publiées | |
| tvOS | Versions non publiées | |
| watchOS | Versions non publiées | |
| Safari | Versions non publiées | |
| iTunes for Windows | Versions non publiées | |
| iCloud for Windows | Versions non publiées |
Références
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification
Autres CVE de iOS
Les 507 CVE de iOS →
CVE-2024-44229
An information leakage was addressed with additional validation
5.3
Moyenne
CVE-2024-44218
This issue was addressed with improved checks
7.8
Élevée
CVE-2024-40867
A custom URL scheme handling issue was addressed with improved input validation
8.8
Élevée
CVE-2024-44259
This issue was addressed through improved state management
8.8
Élevée