VULNERABILITY INTELLIGENCE
CVE-2019-8766
CVSS score8.8 HIGH
EPSS probability1.72%
CISA KEVNot currently listed
Published2019-12-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution.
Weakness classification
- CWE-787: Out-of-bounds Write
Primary references
- product-security@apple.com — Third Party Advisory
- product-security@apple.com — Vendor Advisory
- product-security@apple.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory