High severity8.8NVD Advisory· Published Dec 18, 2019· Updated Jun 17, 2026

CVE-2019-8609

Description

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./tvOSllm-fuzzy2 versions
before 12.3+ 1 more
- (no CPE)range: before 12.3
- (no CPE)range: unspecified
Apple Inc./macOSllm-fuzzy2 versions
before 10.14.5+ 1 more
- (no CPE)range: before 10.14.5
- (no CPE)range: unspecified
Apple Inc./Safarillm-fuzzy2 versions
before 12.1.1+ 1 more
- (no CPE)range: before 12.1.1
- (no CPE)range: unspecified
Apple Inc./iOSllm-fuzzy2 versions
before 12.3+ 1 more
- (no CPE)range: before 12.3
- (no CPE)range: unspecified
Apple Inc./iTunes for Windowsllm-fuzzy2 versions
before 12.9.5+ 1 more
- (no CPE)range: before 12.9.5
- (no CPE)range: unspecified
Apple Inc./iCloud for Windowsllm-fuzzy2 versions
before 7.12+ 1 more
- (no CPE)range: before 7.12
- (no CPE)range: unspecified
osv-coords7 versions
pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.0 pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP4
< 2.24.2-lp151.2.3.1+ 6 more
- (no CPE)range: < 2.24.2-lp151.2.3.1
- (no CPE)range: < 2.24.2-lp151.2.3.1
- (no CPE)range: < 2.24.2-2.44.1
- (no CPE)range: < 2.24.2-2.44.1
- (no CPE)range: < 2.24.2-2.44.1
- (no CPE)range: < 2.24.2-2.44.1
- (no CPE)range: < 2.24.2-2.44.1

Patches

Vulnerability mechanics

References

support.apple.com/HT210118nvdVendor Advisory
support.apple.com/HT210119nvdVendor Advisory
support.apple.com/HT210120nvdVendor Advisory
support.apple.com/HT210123nvdVendor Advisory
support.apple.com/HT210124nvdVendor Advisory
support.apple.com/HT210125nvdVendor Advisory
support.apple.com/HT210212nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000