CVE-2019-8602

—

CVSS 3.1

7.8 high

EPSS

10%p95

Published

Dec 18, 2019 (Dec 18, 2019)

Modified

Jun 17, 2026

Description

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A malicious application may be able to elevate privileges.

Vendors: apple
Products: icloud, itunes, safari, iphone os, mac os x, tvos, watchos
Weakness: CWE-787
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (10.3%)

In the news2 stories

Gaining remote code execution using a tainted SQLite database

Security AffairsAug 11, 16:18 UTC · Aug 11, 2019Vulnerability CVE-2019-8600 CVE-2019-8598 CVE-2019-8602+1 CVEs1

Apple updates fix SQLite, WebKit issues in iTunes and iCloud for Windows

Security AffairsJun 1, 14:34 UTC · Jun 1, 2019Vulnerability CVE-2019-8577 CVE-2019-8602 CVE-2019-8600+2 CVEs