CVE-2019-8527

Published: 18/12/2019 Updated: 30/12/2019

CVSS v2 Base Score: 9.4 | Impact Score: 9.2 | Exploitability Score: 10

CVSS v3 Base Score: 9.1 | Impact Score: 5.2 | Exploitability Score: 3.9

VMScore: 837

Vector: AV:N/AC:L/Au:N/C:N/I:C/A:C

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple mac os x
apple iphone os
apple watchos
apple tvos

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2019-3-25-3 tvOS 122 tvOS 122 is now available and addresses the following: CFString Available for: Apple TV 4K and Apple TV (4th generation) Impact: Processing a maliciously crafted string may lead to a denial of service Description: A validation issue was addressed with improved logic ...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2019-3-25-2 macOS Mojave 10144, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra macOS Mojave 10144, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra are now available and addresses the following: AppleGraphicsControl Available for: macOS Sierr ...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2019-3-25-1 iOS 122 iOS 122 is now available and addresses the following: CFString Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing a maliciously crafted string may lead to a denial of service Description: A validation issue was add ...

Huge news from Apple: No, not mags, games or TV – more than 50 security bugs to patch

The Register • Thomas Claburn in San Francisco • 26 Mar 2019

Apple rolls out repairs for 51 iOS flaws, including nasty ones, plus fixes for macOS Bad news: Google drops macOS zero-day after Apple misses bug deadline. Good news: It's fiddly to exploit

In addition to teasing the world with a glimpse of subscriptions services for newspapers and magazines, gaming, and video entertainment, Apple on Monday released iOS 12.2, which patches 51 security vulnerabilities. The fruit-themed company's fixes cover some serious flaws and should be applied as soon as possible. Among the most troubling vulnerabilities is a ReplayKit API flaw (CVE-2019-8566) that allows a malicious application to access the microphone on an iPhone, iPad or iPod touch without t...

CVE-2019-8527

Vulnerability Summary

Vulnerability Trend

Mailing Lists

Recent Articles

References

Vulmon Search

About

Products

Connect