CVE-2019-8602

EPSS 10.3%

Vexday Risk Score

8Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 10.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

18 dic 2019Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A malicious application may be able to elevate privileges.

Productos afectados

Apple · iCloud for Windows Apple · iOS Apple · iTunes for Windows Apple · macOS Apple · tvOS Apple · watchOS

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://research.checkpoint.com/2019/select-code_execution-from-using-sqlite/https://support.apple.com/HT210118 https://support.apple.com/HT210119 https://support.apple.com/HT210120 https://support.apple.com/HT210122 https://support.apple.com/HT210124 https://support.apple.com/HT210125 https://support.apple.com/HT210212