{"id":"CVE-2019-8506","published":"2019-12-18T18:15:22Z","modified":"2026-06-17T02:42:03Z","title":"Apple Multiple Products Type Confusion Vulnerability","vendor":"Apple","product":"Multiple Products","tier":"core","eol":null,"description":{"text":"A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.","provenance":"source","from":"NVD"},"summary":{"text":"A type confusion flaw in Apple's multiple products, addressed through improved memory handling, affects iOS, tvOS, watchOS, Safari, iTunes for Windows, and iCloud for Windows. An attacker can achieve arbitrary code execution by getting a victim to process maliciously crafted web content, which requires network access and user interaction but no authentication.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-31T04:54:29Z"},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.16159,"percentile":0.96928,"date":"2026-10-30","provenance":"source"},"kev":{"dateAdded":"2022-05-04","dueDate":"2022-05-25","ransomware":false,"requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-8506","provenance":"source"},"vulncheckKev":{"dateAdded":"2021-10-11","exploitedFirstSeen":"2021-10-11","ransomware":false,"evidence":[{"url":"https://blog.google/threat-analysis-group/analyzing-watering-hole-campaign-using-macos-exploits/","date":"2021-10-11"},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2022-05-04"}],"evidenceTotal":2,"provenance":"source"},"exploited":true,"otx":{"pulseCount":50,"pulses":[{"name":"Actively_Exploited_Kev | Oct 29, 2026","url":"https://otx.alienvault.com/pulse/6ae20c1db17e7057ae7d9ad1","created":"2026-10-28"},{"name":"Actively_Exploited_Kev | Oct 28, 2026","url":"https://otx.alienvault.com/pulse/6ae0ba7e0e2a97ff7b218819","created":"2026-10-27"},{"name":"Actively_Exploited_Kev | Oct 27, 2026","url":"https://otx.alienvault.com/pulse/6adf68b85c3e852f3c111d18","created":"2026-10-26"},{"name":"Actively_Exploited_Kev | Oct 24, 2026","url":"https://otx.alienvault.com/pulse/6adb740e397c3ad4799aa4cd","created":"2026-10-23"},{"name":"Actively_Exploited_Kev | Oct 23, 2026","url":"https://otx.alienvault.com/pulse/6ada236fcfba2dfa730ea482","created":"2026-10-22"},{"name":"Actively_Exploited_Kev | Oct 22, 2026","url":"https://otx.alienvault.com/pulse/6ad8d33a077cbb5cab524d80","created":"2026-10-21"},{"name":"Actively_Exploited_Kev | Oct 21, 2026","url":"https://otx.alienvault.com/pulse/6ad78130c4d1ac2be83a8b6d","created":"2026-10-20"},{"name":"Actively_Exploited_Kev | Oct 20, 2026","url":"https://otx.alienvault.com/pulse/6ad62f63c24a405a3423cc13","created":"2026-10-19"},{"name":"Actively_Exploited_Kev | Oct 19, 2026","url":"https://otx.alienvault.com/pulse/6ad4dda174e5797d0bd238b7","created":"2026-10-18"},{"name":"Actively_Exploited_Kev | Oct 18, 2026","url":"https://otx.alienvault.com/pulse/6ad38c22e1848f8189d1c121","created":"2026-10-17"}],"provenance":"machine"},"cwes":[{"id":"CWE-843","name":"Access of Resource Using Incompatible Type"}],"references":[{"url":"https://support.apple.com/HT209599","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/HT209601","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/HT209602","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/HT209603","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/HT209604","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/HT209605","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/HT209599","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/HT209601","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/HT209602","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/HT209603","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/HT209604","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/HT209605","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8506","tags":["US Government Resource"]}],"techniques":[{"id":"T1189","name":"Drive-by Compromise","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Malicious web content triggers exploitation via browsing","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"Processing maliciously crafted web content may lead to arbitrary code execution","start":190,"end":269}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1059","name":"Command and Scripting Interpreter","tactics":["execution"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Arbitrary code execution is the direct impact","mappingType":"primary_impact","evidence":[{"from":"description","quote":"may lead to arbitrary code execution","start":233,"end":269}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2019-17896","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-17896","exploited":true,"exploitedSince":"2022-05-04","provenance":"source"},"exploits":[{"id":46647,"url":"https://www.exploit-db.com/exploits/46647","title":"WebKit JavaScriptCore - 'createRegExpMatchesArray' Type Confusion","type":"dos","platform":"multiple","date":"2019-04-03","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2019-04-03"},"first":{"date":"2019-04-03","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/46647"},"provenance":"source"},"exploitRefs":[],"flow":[{"stage":"exploitation","techniques":["T1189"],"provenance":"ai"},{"stage":"primary","techniques":["T1059"],"provenance":"ai"}],"timeline":[{"date":"2019-04-03","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-46647)","url":"https://www.exploit-db.com/exploits/46647","provenance":"source"},{"date":"2019-12-18","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-8506","provenance":"source"},{"date":"2021-10-11","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://blog.google/threat-analysis-group/analyzing-watering-hole-campaign-using-macos-exploits/","provenance":"source"},{"date":"2022-05-04","kind":"kev","label":"Added to CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2022-05-04","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-17896","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Exploit-DB","daysToKev":868},"priority":{"score":68.5,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1846 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.39,"detail":"percentile 0.9693"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 Exploit-DB entry"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"50 pulses"},{"name":"CVSS severity","points":6.16,"detail":"base score 8.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-class-apple-ios-macos-cwe-843"}}