VulnerabilityModified
CVE-2019-6227
A memory corruption issue was addressed with improved memory handling.
HIGH 8.8EPSS 1.89%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.89%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
- CVSS 3.0
- 8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 1.89% probability · 78th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-787
- Affected
- apple/safari · apple/iphone os · apple/tvos · apple/watchos · apple/icloud · apple/itunes
- Source
- product-security@apple.com
References
- http://www.securityfocus.com/bid/106696Third Party Advisory, VDB Entry
- https://security.gentoo.org/glsa/201903-12Third Party Advisory
- https://support.apple.com/HT209443Vendor Advisory
- https://support.apple.com/HT209447Vendor Advisory
- https://support.apple.com/HT209448Vendor Advisory
- https://support.apple.com/HT209449Vendor Advisory
- https://support.apple.com/HT209450Vendor Advisory
- https://support.apple.com/HT209451Vendor Advisory
- http://www.securityfocus.com/bid/106696Third Party Advisory, VDB Entry
- https://security.gentoo.org/glsa/201903-12Third Party Advisory
- https://support.apple.com/HT209443Vendor Advisory
- https://support.apple.com/HT209447Vendor Advisory
- https://support.apple.com/HT209448Vendor Advisory
- https://support.apple.com/HT209449Vendor Advisory
- https://support.apple.com/HT209450Vendor Advisory
- https://support.apple.com/HT209451Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.