← CVE Radar
CVE-2019-8506Apple Multiple Products Type Confusion Vulnerability
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
8.8 HIGHEPSS 16.15%⚡ Known Exploited (CISA KEV)NVD: Published
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.8 | HIGH | 3.1CISA-ADP | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2019-8506
- Status
- Published
- Assigner (CNA)
- apple
- Published
- Dec 18, 2019
- Last modified
- 2025-10-21 23:35 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
AppleiOS1 version range
- before iOS 12.2
AppletvOS1 version range
- before tvOS 12.2
ApplewatchOS1 version range
- before watchOS 5.2
AppleSafari1 version range
- before Safari 12.1
AppleiTunes for Windows1 version range
- before iTunes 12.9.4 for Windows
AppleiCloud for Windows1 version range
- before iCloud for Windows 7.11
References
- support.apple.com https://support.apple.com/HT209599
- support.apple.com https://support.apple.com/HT209601
- support.apple.com https://support.apple.com/HT209603
- support.apple.com https://support.apple.com/HT209604
- support.apple.com https://support.apple.com/HT209605
- support.apple.com https://support.apple.com/HT209602
Sources
- NVD (unavailable at last refresh)
- CVE.org
- CISA KEV
- FIRST EPSS