CVE-2019-7285

Published: 18/12/2019 Updated: 02/01/2020

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple iphone os
apple tvos
apple icloud
apple itunes
apple safari

------------------------------------------------------------------------ WebKitGTK and WPE WebKit Security Advisory WSA-2019-0002 ------------------------------------------------------------------------ Date reported : April 10, 2019 Advisory ID : WSA-2019-0002 CVE identifiers : CVE-2019-6201, CVE-2019-6251, CVE-2019-7285, ...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2019-3-25-3 tvOS 122 tvOS 122 is now available and addresses the following: CFString Available for: Apple TV 4K and Apple TV (4th generation) Impact: Processing a maliciously crafted string may lead to a denial of service Description: A validation issue was addressed with improved logic ...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2019-3-25-1 iOS 122 iOS 122 is now available and addresses the following: CFString Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing a maliciously crafted string may lead to a denial of service Description: A validation issue was add ...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2019-3-25-4 Safari 121 Safari 121 is now available and addresses the following: Safari Reader Available for: macOS Sierra 10126, macOS High Sierra 10136, and Mojave 10144 Impact: Enabling the Safari Reader feature on a maliciously crafted webpage may lead to universal cross site sc ...

Huge news from Apple: No, not mags, games or TV – more than 50 security bugs to patch

The Register • Thomas Claburn in San Francisco • 26 Mar 2019

Apple rolls out repairs for 51 iOS flaws, including nasty ones, plus fixes for macOS Bad news: Google drops macOS zero-day after Apple misses bug deadline. Good news: It's fiddly to exploit

In addition to teasing the world with a glimpse of subscriptions services for newspapers and magazines, gaming, and video entertainment, Apple on Monday released iOS 12.2, which patches 51 security vulnerabilities. The fruit-themed company's fixes cover some serious flaws and should be applied as soon as possible. Among the most troubling vulnerabilities is a ReplayKit API flaw (CVE-2019-8566) that allows a malicious application to access the microphone on an iPhone, iPad or iPod touch without t...

CVE-2019-7285

Vulnerability Summary

Vulnerability Trend

Mailing Lists

Recent Articles

References

Vulmon Search

About

Products

Connect