First published: Tue Sep 24 2019(Updated: )
AppleFirmwareUpdateKext. A memory corruption vulnerability was addressed with improved locking.
Credit: Mohamed Ghannam @_simo36 Mohamed Ghannam @_simo36 Mohamed Ghannam @_simo36 product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple watchOS | <6.1 | |
Apple iOS | <13.1 | 13.1 |
Apple iPadOS | <13.1 | 13.1 |
Apple tvOS | <13 | 13 |
Apple watchOS | <6.1 | 6.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
The severity of CVE-2019-8747 is critical with a CVSS score of 7.8.
CVE-2019-8747 affects watchOS (up to version 6.1), tvOS (up to version 13), iOS (up to version 13.1), and iPadOS (up to version 13.1).
An attacker can exploit CVE-2019-8747 by executing arbitrary code with kernel privileges.
CVE-2019-8747 is fixed in watchOS 6.1. Ensure you have updated to the latest version of watchOS or the affected software.
You can find more information about CVE-2019-8747 on the Apple support page: https://support.apple.com/en-us/HT210724