CVE-2019-8605

Katalog CVE

CVSS 7.8 · High KEV · sudah dieksploitasi EPSS 17,6%

Kerentanan Use After Free pada apple iphone os, apple mac os x +2 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD. Masuk katalog KEV CISA pada 27 Juni 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

Rincian

Terbit di NVD

18 Desember 2019

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

17,6% peluang dieksploitasi; lebih tinggi dari 97,0% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Apple Multiple Products Use-After-Free Vulnerability

Masuk KEV

27 Juni 2022

Tenggat CISA

18 Juli 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.apple.com/HT210118 release notes · advisory vendor
• https://support.apple.com/HT210119 release notes · advisory vendor
• https://support.apple.com/HT210120 release notes · advisory vendor
• https://support.apple.com/HT210122 release notes · advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8605 pemerintah AS