CVE-2019-8685
First published: Mon Jul 22 2019(Updated: )
WebKit. Multiple memory corruption issues were addressed with improved memory handling.
Credit: G. Geshev Trend MicroZongming Wang (王宗明) Zhe Jin (金哲) Chengdu Security Response Center of Qihoo 360 Technology Coakayn Trend MicroApple Samuel Groß Google Project ZeroSoyeon Park Wen Xu SSLab at Georgia TechJihui Lu Tencent KeenLabAnthony Lai @darkfloyd1014 KnownsecKen Wong @wwkenwong VXRLJeonghoon Shin @singi21a TheoriJohnny Yu @straight_blast VX Browser Exploitation GroupChris Chan @dr4g0nfl4me VX Browser Exploitation GroupPhil Mok @shadyhamsters VX Browser Exploitation GroupAlan Ho @alan_h0 KnownsecByron Wai VX Browser ExploitationP1umer ADLab of VenustechG. Geshev Trend Micro Zero Day Initiativelokihardt Google Project Zeroakayn Dongzhuo Zhao ADLab of VenustechAnthony Lai @darkfloyd1014 VXRL Eric Lung @Khlung1 VXRLInsu Yun SSLab at Georgia Techan anonymous researcher product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| tvOS | <12.4 | 12.4 |
| macOS Mojave | <10.14.6 | 10.14.6 |
| macOS High Sierra | ||
| macOS High Sierra | ||
| Apple iCloud for Windows | <7.13 | |
| Apple iCloud for Windows | >=10.0<10.6 | |
| Apple iTunes for Windows | <12.9.6 | |
| Apple Mobile Safari | <12.1.2 | |
| iOS | <12.4 | |
| Apple iOS and macOS | <10.14.6 | |
| tvOS | <12.4 | |
| Apple iOS, iPadOS, and watchOS | <5.3 | |
| Apple iOS, iPadOS, and watchOS | <12.4 | 12.4 |
| Apple iOS, iPadOS, and watchOS | <5.3 | 5.3 |
| Apple iCloud | <7.13 | 7.13 |
| Apple iCloud | <10.6 | 10.6 |
| Apple iTunes | <12.9.6 | 12.9.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT210346 (Advisory)
- https://support.apple.com/en-us/HT210348 (Advisory)
- https://support.apple.com/en-us/HT210351 (Advisory)
- https://support.apple.com/en-us/HT210353 (Advisory)
- https://support.apple.com/en-us/HT210356 (Advisory)
- https://support.apple.com/en-us/HT210357 (Advisory)
- https://support.apple.com/en-us/HT210358 (Advisory)
- https://support.apple.com/HT210346
- https://support.apple.com/HT210348
- https://support.apple.com/HT210351
- https://support.apple.com/HT210353
- https://support.apple.com/HT210355
- https://support.apple.com/HT210356
- https://support.apple.com/HT210357
- https://support.apple.com/HT210358
Parent vulnerabilities
(Appears in the following advisories)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2019-9506
- CVE-2020-10135
- CVE-2019-8646
- CVE-2019-8647
- CVE-2019-8660
- CVE-2019-8702
- CVE-2018-16860
- CVE-2019-8668
- CVE-2019-13118
- CVE-2019-8698
- CVE-2019-8662
- CVE-2019-8657
- CVE-2019-8690
- CVE-2019-8649
- CVE-2019-8658
- CVE-2019-8644
- CVE-2019-8666
- CVE-2019-8669
- CVE-2019-8671
- CVE-2019-8672
- CVE-2019-8673
- CVE-2019-8676
- CVE-2019-8677
- CVE-2019-8678
- CVE-2019-8679
- CVE-2019-8680
- CVE-2019-8681
- CVE-2019-8683
- CVE-2019-8684
- CVE-2019-8685
- CVE-2019-8686
- CVE-2019-8687
- CVE-2019-8688
- CVE-2019-8689
- CVE-2019-8693
- CVE-2019-8656
- CVE-2018-19860
- CVE-2019-8661
- CVE-2019-8675
- CVE-2019-8696
- CVE-2019-8539
- CVE-2019-8697
- CVE-2019-8648
- CVE-2019-8663
- CVE-2019-8695
- CVE-2019-8691
- CVE-2019-8692
- CVE-2019-8694
- CVE-2019-8670
- CVE-2019-8701
- CVE-2019-8667
- CVE-2019-8665
- CVE-2019-8699
- CVE-2019-8682
- CVE-2019-8624
- CVE-2019-8633
- CVE-2019-8659
Frequently Asked Questions
What is CVE-2019-8685?
CVE-2019-8685 is a vulnerability in WebKit that allows for multiple memory corruption issues with improved memory handling.
How severe is CVE-2019-8685?
CVE-2019-8685 has a severity rating of 8.8, which is considered critical.
Which software versions are affected by CVE-2019-8685?
macOS Mojave up to version 10.14.6, tvOS up to version 12.4, watchOS up to version 5.3, Safari up to version 12.1.2, iTunes for Windows up to version 12.9.6, iCloud for Windows up to version 7.13, and iOS up to version 12.4 are affected by CVE-2019-8685.
How can I fix CVE-2019-8685?
To fix CVE-2019-8685, update your software to the latest version: macOS Mojave version 10.14.6, tvOS version 12.4, watchOS version 5.3, Safari version 12.1.2, iTunes for Windows version 12.9.6, iCloud for Windows version 7.13, or iOS version 12.4.
Where can I find more information about CVE-2019-8685?
You can find more information about CVE-2019-8685 on the Apple support website. Here are some references: [link1](https://support.apple.com/en-us/HT210348), [link2](https://support.apple.com/en-us/HT210351), [link3](https://support.apple.com/en-us/HT210353).
- agent/type
- agent/first-publish-date
- agent/weakness
- agent/references
- agent/author
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/trending
- agent/source
- collector/apple-support
- alias/CVE-2019-8666
- alias/CVE-2019-8669
- alias/CVE-2019-8671
- alias/CVE-2019-8672
- alias/CVE-2019-8673
- alias/CVE-2019-8676
- alias/CVE-2019-8677
- alias/CVE-2019-8678
- alias/CVE-2019-8679
- alias/CVE-2019-8680
- alias/CVE-2019-8681
- alias/CVE-2019-8683
- alias/CVE-2019-8684
- alias/CVE-2019-8685
- alias/CVE-2019-8686
- alias/CVE-2019-8687
- alias/CVE-2019-8688
- alias/CVE-2019-8689
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- vendor/apple
- canonical/tvos
- canonical/macos mojave
- canonical/macos high sierra
- canonical/apple icloud for windows
- version/apple icloud for windows/10.0
- canonical/apple itunes for windows
- canonical/apple mobile safari
- canonical/ios
- canonical/apple ios and macos
- canonical/apple ios, ipados, and watchos
- canonical/apple icloud
- canonical/apple itunes