ZeroDay Findings
Sign inSign up

Findings

CVE-2019-8605

Apple Multiple Products Use-After-Free Vulnerability

Published Dec 18, 2019 · updated Jun 16, 2026 · apple iphone os

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 18, 2019 · Catalog

    Detected

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

  2. Jun 27, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Jul 18, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

Required action

Apply updates per vendor instructions.

CISA due date Jul 18, 2022

Affected

  • cpe apple/iphone osversion unspecified
  • cpe apple/mac os xversion unspecified
  • cpe apple/tvosversion unspecified
  • cpe apple/watchosversion unspecified
  • vendor Apple Multiple Productsversion unspecified

Sources

  • CISA KEVCVE-2019-8605

    A use-after-free vulnerability in Apple iOS, macOS, tvOS, and watchOS could allow a malicious application to execute code with system privileges.

    cisa.gov
  • CVE.orgCVE-2019-8605

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2019-8605

    30-day exploitation probability 17.6%

    first.org
  • Exploit Database46892

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Exploit Database47409

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • NIST NVDCVE-2019-8605

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

    nvd.nist.gov

References