CVEvulnerability
CVE-2019-7286
CISA Known Exploited Vulnerability
Apple Multiple Products Memory Corruption Vulnerability — Apple Multiple Products
Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for privilege escalation.
- Added to KEV
- 2022-05-23
- Remediation due
- 2022-06-13
- Ransomware use
- Unknown
- Required action
- Apply updates per vendor instructions.
- Notes
- https://nvd.nist.gov/vuln/detail/CVE-2019-7286
- Status
- Analyzed
- Published
- 2019-12-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-787
Description
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.
Affected configurations
• apple iphone os (< 12.1.4)
• apple mac os x (< 10.14.3)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://support.apple.com/HT209520 Vendor Advisory
- https://support.apple.com/HT209521 Vendor Advisory
- https://support.apple.com/HT209601 Vendor Advisory
- https://support.apple.com/HT209602 Vendor Advisory
- https://support.apple.com/HT209520 Vendor Advisory
- https://support.apple.com/HT209521 Vendor Advisory
- https://support.apple.com/HT209601 Vendor Advisory
- https://support.apple.com/HT209602 Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7286 US Government Resource