{"id":"CVE-2019-8717","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-8717","generatedAt":"2026-10-27T22:31:26.308Z","title":"A memory corruption issue was addressed with improved memory handling.","description":"A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15, tvOS 13. An application may be able to execute arbitrary code with kernel privileges.","published":"2019-12-18T18:15:36.000Z","lastModified":"2026-06-17T02:42:26.000Z","status":"Modified","sourceIdentifier":"product-security@apple.com","cvss":{"version":"3.1","score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-787"],"affected":["apple/mac os x","apple/tvos"],"epss":{"score":0.01288,"percentile":0.69987,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2019-10-09","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":47479,"kind":"exploit","title":"XNU - Remote Double-Free via Data Race in IPComp Input Path","url":"https://www.exploit-db.com/exploits/47479","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/macos/dos/47479.txt","file":"exploits/macos/dos/47479.txt","published":"2019-10-09","added":"2019-10-09","updated":"2019-10-09","author":"Google Security Research","type":"dos","platform":"macos","port":null,"verified":true,"codes":["CVE-2019-8717"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1898"}]},"verdict":{"level":"urgent","text":"A public exploit is published in Exploit-DB (verified) and the impact is high, while EPSS rates exploitation at 1.3%. Anyone can run this; patch or mitigate before the next change window and check exposed instances for signs of use."},"changes":[],"references":[{"url":"https://support.apple.com/HT210634","tags":["Release Notes","Vendor Advisory"],"source":"product-security@apple.com"},{"url":"https://support.apple.com/kb/HT210722","tags":["Release Notes","Vendor Advisory"],"source":"product-security@apple.com"},{"url":"https://support.apple.com/HT210634","tags":["Release Notes","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/kb/HT210722","tags":["Release Notes","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-8717","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}