CVE-2019-8605

CVE Database · CVE-2019-8605

CVE-2019-8605

· HIGHAnalyzed

CVSS v3.1

7.8

EPSS

17.51%

Published

Dec 18, 2019

Modified

Oct 23, 2025

CISA Known Exploited Vulnerability

Added: 2022-06-27 · Due: 2022-07-18

Apply updates per vendor instructions.

Public PoC / Exploit (4)

All weaponized →

Exploit-DBiOS < 12.4.1 - 'Jailbreak' Local Privilege Escalation Exploit-DBApple macOS < 10.14.5 / iOS < 12.3 XNU - 'in6_pcbdetach' Stale Pointer Use-After-Free TrickestTrickest PoC index GitHub PoC1nteger-c/CVE-2019-8605★0

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-416CWE-416

Affected Products (4)

apple · iphone_os (up to 12.3)vulnerable

apple · mac_os_x (up to 10.14.5)vulnerable

apple · tvos (up to 12.3)vulnerable

apple · watchos (up to 5.2.1)vulnerable

References (9)

https://support.apple.com/HT210118

Release NotesVendor Advisory

https://support.apple.com/HT210119

Release NotesVendor Advisory

https://support.apple.com/HT210120

Release NotesVendor Advisory

https://support.apple.com/HT210122

Release NotesVendor Advisory

https://support.apple.com/HT210118

Release NotesVendor Advisory

https://support.apple.com/HT210119

KEV Catalog EPSS Scores Vendors All CVEs