CVE-2019-8751

HIGH

iCloud < 7.14 - Memory Corruption via Malicious Web Content

Title source: llm
STIX 2.1

Description

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, iCloud for Windows 10.7, iCloud for Windows 7.14, tvOS 13, watchOS 6, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.

References (7)

Core 7
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210604
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210607
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210603
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210635
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210636
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210637
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210605

Scores

CVSS v3 8.8
EPSS 0.0154
EPSS Percentile 72.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (7)
apple/icloud < 7.14
apple/ipad_os < 13.1
apple/iphone_os < 13.1
apple/itunes < 12.10.1
apple/safari < 13.0.1
apple/tvos < 13
apple/watchos < 6.0
Published Oct 27, 2020
Tracked Since Feb 18, 2026