PT-2019-19247
CVE-2019-8835
·
Published
2019-12-19
·
Updated
2026-10-31
Description by
CVSS 2.0
9.3
HighMetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Apple Safari versions prior to 13.0.4
Apple tvOS versions prior to 13.3
Apple iOS versions prior to 13.3
Apple iPadOS versions prior to 13.3
Apple iTunes for Windows versions prior to 12.10.3
Apple iCloud for Windows versions prior to 10.9 and prior to 7.16
Description
The issue is related to multiple memory corruption problems that have been addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution.
Recommendations
For Apple Safari versions prior to 13.0.4, update to version 13.0.4 or later.
For Apple tvOS versions prior to 13.3, update to version 13.3 or later.
For Apple iOS versions prior to 13.3, update to version 13.3 or later.
For Apple iPadOS versions prior to 13.3, update to version 13.3 or later.
For Apple iTunes for Windows versions prior to 12.10.3, update to version 12.10.3 or later.
For Apple iCloud for Windows versions prior to 10.9 and prior to 7.16, update to version 10.9 or version 7.16 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾