← Back to browse · API

CVE-2019-8506

Severity
HIGH
CVSS
8.8
EPSS
0.18108
Risk score
66.54
CISA KEV
Yes
PoC
No
Published
2019-12-18
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2019-17896, GHSA-FG7H-Q67H-82RG
Products
Apple:Multiple Products, Apple:Safari unspecified <Safari 12.1, Apple:iCloud for Windows unspecified <iCloud for Windows 7.11, Apple:iTunes for Windows unspecified <iTunes 12.9.4 for Windows, Apple:tvOS unspecified <tvOS 12.2, Apple:watchOS unspecified <watchOS 5.2, Cisco:IOS unspecified <iOS 12.2
Sources
cisa.gov CVE-2019-8506
euvd EUVD-2019-17896

Description

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

References