VulnerableCode Vulnerability Details

Search for vulnerabilities

Vulnerability details: VCID-1mgc-8y2u-9ygd

Essentials
Severities (18)
References (56)
Severity details (4)
Exploits (1)
EPSS
History (1)

Vulnerability ID	VCID-1mgc-8y2u-9ygd
Aliases	CVE-2019-8672
Summary	Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
Status	Published
Exploitability	2.0
Weighted Severity	8.4
Risk	10.0
Affected and Fixed Packages	Package Details

Weaknesses (1)

CWE-787

Out-of-bounds Write

System	Score	Found at
cvssv3	8.8	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8672.json
epss	0.40339	https://api.first.org/data/v1/epss?cve=CVE-2019-8672
epss	0.40339	https://api.first.org/data/v1/epss?cve=CVE-2019-8672
epss	0.40339	https://api.first.org/data/v1/epss?cve=CVE-2019-8672
epss	0.40339	https://api.first.org/data/v1/epss?cve=CVE-2019-8672
epss	0.40339	https://api.first.org/data/v1/epss?cve=CVE-2019-8672
epss	0.40339	https://api.first.org/data/v1/epss?cve=CVE-2019-8672
epss	0.40339	https://api.first.org/data/v1/epss?cve=CVE-2019-8672
epss	0.40339	https://api.first.org/data/v1/epss?cve=CVE-2019-8672
epss	0.40339	https://api.first.org/data/v1/epss?cve=CVE-2019-8672
epss	0.40339	https://api.first.org/data/v1/epss?cve=CVE-2019-8672
epss	0.40339	https://api.first.org/data/v1/epss?cve=CVE-2019-8672
epss	0.40339	https://api.first.org/data/v1/epss?cve=CVE-2019-8672
epss	0.40339	https://api.first.org/data/v1/epss?cve=CVE-2019-8672
epss	0.40339	https://api.first.org/data/v1/epss?cve=CVE-2019-8672
cvssv3	6.3	https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv2	9.3	https://nvd.nist.gov/vuln/detail/CVE-2019-8672
cvssv3.1	8.8	https://nvd.nist.gov/vuln/detail/CVE-2019-8672

Reference id	Reference type	URL
		https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8672.json
		https://api.first.org/data/v1/epss?cve=CVE-2019-8672
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8644
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8649
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8658
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8666
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8669
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8671
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8672
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8673
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8674
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8676
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8677
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8678
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8679
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8680
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8681
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8683
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8684
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8686
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8687
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8688
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8689
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8690
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8707
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8719
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8733
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8763
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8765
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8821
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8822
		https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
		https://support.apple.com/HT210346
		https://support.apple.com/HT210348
		https://support.apple.com/HT210351
		https://support.apple.com/HT210353
		https://support.apple.com/HT210355
		https://support.apple.com/HT210356
		https://support.apple.com/HT210357
		https://support.apple.com/HT210358
1876634		https://bugzilla.redhat.com/show_bug.cgi?id=1876634
cpe:2.3:a:apple:icloud::::::windows::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apple:icloud::::::windows::*
cpe:2.3:a:apple:itunes::::::windows::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apple:itunes::::::windows::*
cpe:2.3:a:apple:safari::::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apple:safari::::::::
cpe:2.3:o:apple:iphone_os::::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:iphone_os::::::::
cpe:2.3:o:apple:mac_os_x::::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:mac_os_x::::::::
cpe:2.3:o:apple:tvos::::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:tvos::::::::
cpe:2.3:o:apple:watchos::::::::		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:watchos::::::::
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:::::::*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:::::::*
CVE-2019-8672	Exploit	https://bugs.chromium.org/p/project-zero/issues/detail?id=1825
CVE-2019-8672	Exploit	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/47191.txt
CVE-2019-8672		https://nvd.nist.gov/vuln/detail/CVE-2019-8672
RHSA-2019:3553		https://access.redhat.com/errata/RHSA-2019:3553
RHSA-2020:4035		https://access.redhat.com/errata/RHSA-2020:4035

Data source	Exploit-DB
Date added	July 30, 2019
Description	macOS / iOS JavaScriptCore - JSValue Use-After-Free in ValueProfiles
Ransomware campaign use	Known
Source publication date	July 30, 2019
Exploit type	dos
Platform	multiple
Source update date	July 30, 2019
Source URL	https://bugs.chromium.org/p/project-zero/issues/detail?id=1825

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8672.json

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C Found at https://nvd.nist.gov/vuln/detail/CVE-2019-8672

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Exploitability (E)

Access Vector (AV)

Access Complexity (AC)

Authentication (Au)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

partial

complete

none

partial

complete

none

partial

complete

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2019-8672

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality Impact (C)

Integrity Impact (I)

Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Exploit Prediction Scoring System (EPSS)

Percentile	0.9722
EPSS Score	0.40339
Published At	July 31, 2025, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2025-07-31T08:29:12.361978+00:00	Alpine Linux Importer	Import	https://secdb.alpinelinux.org/v3.17/community.json	37.0.0