First published: Mon May 13 2019(Updated: )
WebKit. Multiple memory corruption issues were addressed with improved memory handling.
Credit: G. Geshev Trend Micro Zero Day InitiativeLiu Long Qihoo 360 Vulcan Team01 Trend Microsakura Tencent Xuanwu Labjessica @babyjess1ca_ Tencent Keen Lab dwfault working at ADLab VenustechG. Geshev MWR Labs working with Trend Micro Zero Day Initiativean anonymous researcher Suyoung Lee Sooel Son KAIST Web SecurityHyungSeok Han Sang Kil Cha KAIST SoftSec LabWen Xu SSLab at Georgia Tech01 Trend Micro Zero Day InitiativeFluoroacetate Trend MicroWen Xu SSLabGeorgia Tech Anonymous Trend Micro Zero Day InitiativeSamuel Groß Google Project ZeroG. Geshev MWR Labs working with Trend MicroHanqing Zhao Chaitin Security Research Lab product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/webkitgtk | <2.24.0 | 2.24.0 |
tvOS | <12.3 | 12.3 |
macOS Mojave | <10.14.5 | 10.14.5 |
macOS High Sierra | ||
macOS High Sierra | ||
Apple iOS, iPadOS, and watchOS | <5.2.1 | 5.2.1 |
iTunes | <12.9.5 | 12.9.5 |
Apple iOS and iPadOS | <12.3 | 12.3 |
iCloud for Windows | <7.12 | |
iTunes | <12.9.5 | |
Safari | <12.1.1 | |
iPhone OS | <12.3 | |
Apple iOS and macOS | <10.14.5 | |
tvOS | <12.3 | |
Apple iOS, iPadOS, and watchOS | <5.2.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2019-8622 is a vulnerability in WebKit that allows arbitrary code execution by processing malicious web content.
CVE-2019-8622 affects Apple iTunes for Windows, Apple macOS Mojave, Apple Safari, Apple iPhone OS, Apple tvOS, and Apple watchOS.
CVE-2019-8622 has a severity score of 8.8 (High).
CVE-2019-8622 is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, and iCloud for Windows 7.12.
You can find more information about CVE-2019-8622 on Apple's official support page: [insert URL].