Vulnerability in Apple Icloud For Windows
CVE-2019-8506
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may le…
EPSS: 0.080 (92.3th percentile) — read the EPSS interpretation.
Affected products
- Apple Icloud For Windows — versions unspecified
- Apple Ios — versions unspecified
- Apple Itunes For Windows — versions unspecified
- Apple Safari — versions unspecified
- Apple Tvos — versions unspecified
- Apple Watchos — versions unspecified
CISA KEV (Known Exploited Vulnerabilities)
This CVE is on the CISA KEV catalog, added on . CISA KEV inclusion means CISA has confirmed in-the-wild exploitation; US federal agencies are required to remediate within a published due date.
BOD 22-01 due date: .
Required action: Apply updates per vendor instructions.
Public proof-of-concept exploits
References
- support.apple.com/HT209599 (x_refsource_MISC)
- support.apple.com/HT209601 (x_refsource_MISC)
- support.apple.com/HT209603 (x_refsource_MISC)
- support.apple.com/HT209604 (x_refsource_MISC)
- support.apple.com/HT209605 (x_refsource_MISC)
- support.apple.com/HT209602 (x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-8506?
- CVE-2019-8506 is a vulnerability in Apple Icloud For Windows. Published 2019-12-18.
- Is CVE-2019-8506 known to be exploited?
- Yes. CVE-2019-8506 is listed in the CISA Known Exploited Vulnerabilities catalog (added 2022-05-04), indicating it is being actively exploited. 6 public proof-of-concept repositories are indexed.