VulnerabilityModified
CVE-2019-8784
A memory corruption issue was addressed with improved memory handling.
HIGH 7.8EPSS 1.35%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.35%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. An application may be able to execute arbitrary code with system privileges.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 1.35% probability · 70th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-787
- Affected
- apple/icloud · apple/itunes · apple/ipados · apple/iphone os · apple/mac os x
- Source
- product-security@apple.com
References
- https://support.apple.com/HT210721Vendor Advisory
- https://support.apple.com/HT210722Vendor Advisory
- https://support.apple.com/HT210726Vendor Advisory
- https://support.apple.com/HT210727Vendor Advisory
- https://support.apple.com/HT210728Vendor Advisory
- https://support.apple.com/HT210721Vendor Advisory
- https://support.apple.com/HT210722Vendor Advisory
- https://support.apple.com/HT210726Vendor Advisory
- https://support.apple.com/HT210727Vendor Advisory
- https://support.apple.com/HT210728Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.