CVE-2019-6235

—

CVSS 3.0

10.0 critical

EPSS

2%p81

Published

Mar 4, 2019 (Mar 4, 2019)

Modified

Jun 17, 2026

Description

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions.

Vendors: apple
Products: itunes, iphone os, mac os x, tv os, watch os
Weakness: CWE-787
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.