返回 CVE 瀏覽器

CVE-2019-7286

Known Exploited (CISA KEV)HIGH

7.8

CVSS Severity Score

EPSS Score37.0190%

EPSS Percentile90.94th

Published2019年12月18日

Last Modified2025年10月23日

Vulnerability Description

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.

Affected Platforms (CPE)

💻

Apple

Iphone Os

< 12.1.4

💻

Apple

Mac Os X

< 10.14.3

References & Advisories

🔗 https://support.apple.com/HT209520

🔗 https://support.apple.com/HT209521

🔗 https://support.apple.com/HT209601

🔗 https://support.apple.com/HT209602

🔗 https://support.apple.com/HT209520

🔗 https://support.apple.com/HT209521

🔗 https://support.apple.com/HT209601

🔗 https://support.apple.com/HT209602

相關漏洞威脅

CVE-2008-421110.0

Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iP...

CVE-2009-220410.0

Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitr...

CVE-2008-230310.0

Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitra...

CVE-2010-111910.0

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Safari before 4.1 on ...