High severity8.8CISA KEVNVD Advisory· Published Dec 18, 2019· Updated Jun 17, 2026

CVE-2019-8506

Description

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./iCloud
cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*
Range: <7.11
Apple Inc./iTunes2 versions
cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*+ 1 more
- cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*range: <12.9.4
- (no CPE)range: before 12.9.4
Apple Inc./Safari3 versions
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <12.1
- (no CPE)range: before 12.1
- (no CPE)range: unspecified
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <12.2
Apple Inc./tvOS3 versions
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <12.2
- (no CPE)range: before 12.2
- (no CPE)range: unspecified
Apple Inc./watchOS3 versions
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <5.2
- (no CPE)range: before 5.2
- (no CPE)range: unspecified
Red Hat/Enterprise Linux Desktop
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Workstation
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
Apple Inc./iOSllm-fuzzy2 versions
before 12.2+ 1 more
- (no CPE)range: before 12.2
- (no CPE)range: unspecified
Apple Inc./iCloud for Windowsllm-fuzzy2 versions
before 7.11+ 1 more
- (no CPE)range: before 7.11
- (no CPE)range: unspecified
osv-coords18 versions
pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.0 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%204 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%207
< 2.24.1-lp150.2.19.1+ 17 more
- (no CPE)range: < 2.24.1-lp150.2.19.1
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-3.24.1
- (no CPE)range: < 2.24.1-3.24.1
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
- (no CPE)range: < 2.24.1-2.41.5
Apple Inc./iTunes for Windowscpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

support.apple.com/HT209599nvdRelease NotesVendor Advisory
support.apple.com/HT209601nvdRelease NotesVendor Advisory
support.apple.com/HT209602nvdRelease NotesVendor Advisory
support.apple.com/HT209603nvdRelease NotesVendor Advisory
support.apple.com/HT209604nvdRelease NotesVendor Advisory
support.apple.com/HT209605nvdRelease NotesVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.014
exploit	0.030
kev	0.120
patch	0.000
ransomware	0.000