CVE-2019-7286

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental...

Basic Information

CVE State: PUBLISHED
Reserved Date: January 31, 2019
Published Date: December 18, 2019
Last Updated: June 10, 2025
Vendor: Apple
Product: iOS, macOS
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.
Tags

CVSS Scores

CVSS v3.1

7.8 - HIGH

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

SSVC Information

Exploitation: active
Technical Impact: total

Exploit Status

Exploited in the Wild: Yes (2022-05-23 00:00:00 UTC) Source

References

https://support.apple.com/HT209601 https://support.apple.com/HT209602 https://support.apple.com/HT209520 https://support.apple.com/HT209521

Known Exploited Vulnerability Information

Source	Added Date
CISA	2022-05-23 00:00:00 UTC

Timeline

CVE ID Reserved

January 31, 2019
CVE Published to Public

December 18, 2019
Added to KEVIntel

May 23, 2022