CVE-2019-8547

9.8 criticalEPSS 2.3%

Critical (9.8) in apple. EPSS 2.3% chance of exploitation in the next 30 days.

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, iOS 12.2. A remote attacker may be able to leak memory.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2020-10-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:iphone_os
apple:mac_os_x
apple:watchos

References

https://support.apple.com/en-us/HT209599
https://support.apple.com/en-us/HT209600
https://support.apple.com/en-us/HT209602
https://support.apple.com/en-us/HT210119
https://support.apple.com/en-us/HT209599

Check your stack JSON