CVE-2019-8647

high-risk

Published 2019-12-18

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution.

Do I need to act?

8.5% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

1 public exploit available

47192

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (3)

Iphone Os

Tvos

Watchos

Affected Vendors

Apple

References (6)

Vendor Advisory https://support.apple.com/HT210346

Vendor Advisory https://support.apple.com/HT210351

Vendor Advisory https://support.apple.com/HT210353

Vendor Advisory https://support.apple.com/HT210346

Vendor Advisory https://support.apple.com/HT210351

Vendor Advisory https://support.apple.com/HT210353

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 17/34 · Moderate

Exposure 9/34 · Low