CVE-2019-8844

HIGH

iCloud < 7.16 - Memory Corruption via Malicious Web Content

Title source: llm
STIX 2.1

Description

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, watchOS 6.1.1, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.

References (7)

Core 7
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210785
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210789
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210790
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210793
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210794
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210792
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210795

Scores

CVSS v3 8.8
EPSS 0.0298
EPSS Percentile 86.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (10)
apple/icloud < 7.16
apple/ipados < 13.3
apple/iphone_os < 13.3
apple/itunes < 12.10.3
apple/safari < 13.0.4
apple/tvos < 13.3
apple/watchos < 6.1.1
redhat/enterprise_linux_desktop 7.0
redhat/enterprise_linux_server 7.0
redhat/enterprise_linux_workstation 7.0
Published Oct 27, 2020
Tracked Since Feb 18, 2026