IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
7.8High KEV

CVE-2019-8605Apple Multiple Products Use-After-Free Vulnerability

Apple iOS; Apple macOS; Apple tvOS; Apple watchOS Published: (6 years ago)

Known exploited — Apple Multiple Products Use-After-Free Vulnerability

CISA confirmed this vulnerability is used in real attacks on 27.06.2022. Remediation deadline for US federal agencies: 18.07.2022.

Required action: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2019-8605

Description

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

Weakness (CWE): CWE-416

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Apple iOS unspecified – < iOS 12.3
apple iphone os < 12.3
apple mac os x < 10.14.5
Apple macOS unspecified – < macOS Mojave 10.14.5
Apple tvOS unspecified – < tvOS 12.3
Apple watchOS unspecified – < watchOS 5.2.1

References and patches

CPE matches (NVD) (4)
  • cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* < 12.3
  • cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* < 10.14.5
  • cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* < 12.3
  • cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* < 5.2.1

Recent CVEs in the same product — Apple iOS / iPadOS

8.8High
CVE-2026-113970
Apple HomeView Software; Apple iOS and iPadOS; Apple macOS; Apple tvOS

A use-after-free issue was addressed with improved memory management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15…

3.5Low
CVE-2026-113971
Apple iOS and iPadOS

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to pair a device with an AirPlay receiver from the lock screen.

5.4Medium
CVE-2026-113964
Apple HomeView Software; Apple iOS and iPadOS; Apple macOS; Apple tvOS

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macO…

5.4Medium
CVE-2026-113965
Apple HomeView Software; Apple iOS and iPadOS; Apple macOS; Apple tvOS

This issue was addressed with improved checks. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.…

5.4Medium
CVE-2026-113968
Apple HomeView Software; Apple iOS and iPadOS; Apple macOS; Apple tvOS

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macO…

7.5High
CVE-2026-113969
Apple HomeView Software; Apple iOS and iPadOS; Apple macOS; Apple tvOS

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macO…