CVE-2019-8766

HIGH

iCloud < 10.8 and watchOS < 6.1 - Remote Code Execution via Malicious Web Content

Title source: llm
STIX 2.1

Description

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/HT210724
Vendor Advisory x_refsource_misc
https://support.apple.com/HT210727
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/202003-22

Scores

CVSS v3 8.8
EPSS 0.0172
EPSS Percentile 74.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (2)
apple/icloud < 10.8
apple/watchos < 6.1
Published Dec 18, 2019
Tracked Since Feb 18, 2026