CVE-2019-7286
Apple Multiple Products Memory Corruption Vulnerability
Published Dec 18, 2019 · updated Jun 16, 2026 · apple iphone os
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.
Timeline
Detection, updates, and resolution for this record.
Dec 18, 2019 · Catalog
Detected
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.
May 23, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Jun 13, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.
Required action
Apply updates per vendor instructions.
CISA due date Jun 13, 2022
Affected
- cpe apple/iphone osversion unspecified
- cpe apple/mac os xversion unspecified
- vendor Apple Multiple Productsversion unspecified
Sources
- CISA KEVCVE-2019-7286
Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for privilege escalation.
cisa.gov - CVE.orgCVE-2019-7286
Official CVE identifier
cve.org - FIRST EPSSCVE-2019-7286
30-day exploitation probability 15.9%
first.org - Exploit Database46803
Public archive entry. The exploit body is not stored here.
exploit-db.com - NIST NVDCVE-2019-7286
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.
nvd.nist.gov