CVE-2019-8734
Last modified
CVE-2019-8734 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, Safari 13, tvOS 13, watchOS 6, iTunes 12.10.1 for Windows. EPSS estimates a 1.36% chance of exploitation in the next 30 days.
Description
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, Safari 13, tvOS 13, watchOS 6, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Icloud | < 7.14 |
| Apple | Icloud | >= 10.0, < 10.7 |
| Apple | Itunes | < 12.10.1 |
| Apple | Safari | < 13.0 |
| Apple | Iphone Os | < 13.0 |
| Apple | Tvos | < 13 |
| Apple | Watchos | < 6.0 |
References
- https://support.apple.com/en-us/HT210604Vendor Advisory
- https://support.apple.com/en-us/HT210606Vendor Advisory
- https://support.apple.com/en-us/HT210607Vendor Advisory
- https://support.apple.com/en-us/HT210608Vendor Advisory
- https://support.apple.com/en-us/HT210635Vendor Advisory
- https://support.apple.com/en-us/HT210636Vendor Advisory
- https://support.apple.com/en-us/HT210637Vendor Advisory
- https://support.apple.com/en-us/HT210604Vendor Advisory
- https://support.apple.com/en-us/HT210606Vendor Advisory
- https://support.apple.com/en-us/HT210607Vendor Advisory
- https://support.apple.com/en-us/HT210608Vendor Advisory
- https://support.apple.com/en-us/HT210635Vendor Advisory
- https://support.apple.com/en-us/HT210636Vendor Advisory
- https://support.apple.com/en-us/HT210637Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-8734?
How severe is CVE-2019-8734?
How do I fix CVE-2019-8734?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-8727A logic issue was addressed with improved state management. …4.3
- CVE-2019-8728Multiple memory corruption issues were addressed with improv…8.8
- CVE-2019-8730The contents of locked notes sometimes appeared in search re…3.3
- CVE-2019-8731A permissions issue existed in which execute permission was …5.5
- CVE-2019-8732The issue was addressed with improved data deletion. This is…2.4
- CVE-2019-8733Multiple memory corruption issues were addressed with improv…8.8
- CVE-2019-8735Multiple memory corruption issues were addressed with improv…8.8
- CVE-2019-8736An input validation issue was addressed with improved input …6.5
- CVE-2019-8737A denial of service issue was addressed with improved valida…6.5
- CVE-2019-8738A memory corruption issue was addressed with improved state …7.8
- CVE-2019-8739A memory corruption issue was addressed with improved state …7.8
- CVE-2019-8740A memory corruption vulnerability was addressed with improve…7.8
Are you affected by CVE-2019-8734?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
