Veille CVE
CVE-2019-8506
8.8 Élevée Exploitée activementCatalogue CISA KEV — Apple Multiple Products Type Confusion Vulnerability
Ajoutée le 04/05/2022 · Échéance de correction (agences US) : 25/05/2022
Action requise : Apply updates per vendor instructions.
Description
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 8.8 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 3.1 | 8.8 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 2.0 | 9.3 Élevée | nvd@nist.gov (NVD) | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Faiblesses (CWE)
Références
- https://support.apple.com/HT209599 Release NotesVendor Advisory
- https://support.apple.com/HT209601 Release NotesVendor Advisory
- https://support.apple.com/HT209602 Release NotesVendor Advisory
- https://support.apple.com/HT209603 Release NotesVendor Advisory
- https://support.apple.com/HT209604 Release NotesVendor Advisory
- https://support.apple.com/HT209605 Release NotesVendor Advisory
- https://support.apple.com/HT209599 Release NotesVendor Advisory
- https://support.apple.com/HT209601 Release NotesVendor Advisory
- https://support.apple.com/HT209602 Release NotesVendor Advisory
- https://support.apple.com/HT209603 Release NotesVendor Advisory
- https://support.apple.com/HT209604 Release NotesVendor Advisory
- https://support.apple.com/HT209605 Release NotesVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8506 US Government Resource