Login
Start Free Trial
Research Center
CVE-2019-8506 Research Center

CVE-2019-8506

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

  • 8.8 critical severity

  • CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • 18/12/2019

Products 3

Safari

by Apple

421 Versions

a month ago

Itunes

by Apple

419 Versions

5 months ago

Icloud

by Apple

116 Versions

a year ago

Operating Systems 6

Ip

Iphone OS

by Apple

239 Versions

18 days ago

Enterprise Linux Server

by Redhat

33 Versions

a month ago

En

Enterprise Linux Workstation

by Redhat

11 Versions

a month ago

En

Enterprise Linux Desktop

by Redhat

27 Versions

a month ago

Wa

Watchos

by Apple

63 Versions

a month ago

Tv

Tvos

by Apple

93 Versions

a month ago

Vulnerability Categories 1

Access of Resource Using Incompatible Type ('Type Confusion')

xTags 7

#exposed_to_RCE_attack
#easy_to_exploit
#known_vulnerability
#user_interaction_required_for_exploiting
#confidentiality_impact_if_exploited
#integrity_impact_if_exploited
#availability_impact_if_exploited

Advisory Links 6

https://support.apple.com/HT209599
https://support.apple.com/HT209601
https://support.apple.com/HT209602
https://support.apple.com/HT209603
https://support.apple.com/HT209604
https://support.apple.com/HT209605
http://www.vicarius.io is owned and operated by Vicarius Ltd. (the “Company”). All information contained on the Website is purely for informational, and educational purposes and should be independently verified and confirmed. Vicarius does not accept any liability for any loss or damage whatsoever caused in reliance upon such information or services. No statements or information presented in any form by Vicarius is intended as fact, and you agree that you will not consider the statements or information presented on the Website as fact or as a guarantee of performance.

Related CVEs

Security Research Topics

By Vicarius Cartoons
Apr 12, 2023

Vicarius Cartoons Presents: IT Passover

By David Parkinson Frost
Mar 27, 2023

Acropalypse wreaking havoc, zero-days in Samsung Exynos, Emotet returns (again)

By Vicarius Cartoons
Feb 14, 2023

Vicarius Cartoons Presents: Cupid's Exploit

By Paul Lighter
Jan 11, 2023

When the Target is Also the Threat

A software failure grounded thousands of flights today, raising a complicated question - how do you secure an unstable system? The answer has never been more urgent.
By Paul Lighter
Jan 06, 2023

The Uncomfortable Implications of the LastPass Attack

The recent attack on LastPass has people questioning if they can trust password managers. But there's a bigger issue lurking underneath - can you trust ANY security vendor?
last_chanse_02.png

Start Closing Security Gaps

  • Risk reduction from Day 1
  • Fast set-up and deployment
  • Unified platform
  • Full-featured 14-day trial
Start Free Trial!