Vulnerability Details : CVE-2019-8570
A logic issue was addressed with improved state management. This issue is fixed in iOS 12.1.3, iCloud for Windows 7.10, iTunes 12.9.3 for Windows, Safari 12.0.3, tvOS 12.1.2. Processing maliciously crafted web content may disclose sensitive user information.
Exploit prediction scoring system (EPSS) score for CVE-2019-8570
Probability of exploitation activity in the next 30 days: 0.22%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 60 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2019-8570
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:N/A:N |
8.6
|
2.9
|
NIST |
|
6.5
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
2.8
|
3.6
|
NIST |
References for CVE-2019-8570
-
https://support.apple.com/en-us/HT209450
About the security content of iTunes 12.9.3 for Windows - Apple SupportVendor Advisory
-
https://support.apple.com/en-us/HT209451
About the security content of iCloud for Windows 7.10 - Apple SupportVendor Advisory
-
https://support.apple.com/en-us/HT209449
About the security content of Safari 12.0.3 - Apple SupportVendor Advisory
-
https://support.apple.com/en-us/HT209443
About the security content of iOS 12.1.3 - Apple SupportVendor Advisory
-
https://support.apple.com/en-us/HT209447
About the security content of tvOS 12.1.2 - Apple SupportVendor Advisory
Products affected by CVE-2019-8570
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*
- cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
- cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*