VulnerabilityModified
CVE-2019-8577
An input validation issue was addressed with improved memory handling.
HIGH 7.8EPSS 10.3%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 10.3%, higher than 95% of all known CVEs. Patch or mitigate before the next change window.
Description
An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. An application may be able to gain elevated privileges.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 10.26% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- apple/icloud · apple/itunes · apple/safari · apple/iphone os · apple/mac os x · apple/tvos · apple/watchos
- Source
- product-security@apple.com
References
- https://research.checkpoint.com/2019/select-code_execution-from-using-sqlite/
- https://support.apple.com/HT210118Vendor Advisory
- https://support.apple.com/HT210119Vendor Advisory
- https://support.apple.com/HT210120Vendor Advisory
- https://support.apple.com/HT210122Vendor Advisory
- https://support.apple.com/HT210124Vendor Advisory
- https://support.apple.com/HT210125Vendor Advisory
- https://support.apple.com/HT210212Vendor Advisory
- https://research.checkpoint.com/2019/select-code_execution-from-using-sqlite/
- https://support.apple.com/HT210118Vendor Advisory
- https://support.apple.com/HT210119Vendor Advisory
- https://support.apple.com/HT210120Vendor Advisory
- https://support.apple.com/HT210122Vendor Advisory
- https://support.apple.com/HT210124Vendor Advisory
- https://support.apple.com/HT210125Vendor Advisory
- https://support.apple.com/HT210212Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.