Live › vulnerability › CVE-2019-8506
Go to dashboardA type confusion bug in multiple Apple products lets crafted web content be processed in a way that corrupts memory. An attacker who gets a user to load a malicious web page can run code on the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Apple Multiple Products | vendor | – | – |
Check the installed Apple OS and Safari versions against Apple's security notes for this CVE; the sources do not give a specific version or command.
Update Apple devices and Safari to the latest version per Apple's vendor instructions named in the CISA KEV entry.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
This page as .md · .json · in your agent: get_signal("CVE-2019-8506")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.