{"history":[{"alert":0,"cve":"CVE-2019-8506","id":21853,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.16159, \"percentile\": 0.96978}"},{"alert":0,"cve":"CVE-2019-8506","id":19470,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.16159, \"percentile\": 0.96959}"},{"alert":0,"cve":"CVE-2019-8506","id":17436,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.16159, \"percentile\": 0.96955}"},{"alert":0,"cve":"CVE-2019-8506","id":15500,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.16159, \"percentile\": 0.96953}"},{"alert":0,"cve":"CVE-2019-8506","id":13478,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.16159, \"percentile\": 0.96951}"},{"alert":0,"cve":"CVE-2019-8506","id":11260,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.16159, \"percentile\": 0.96947}"},{"alert":1,"cve":"CVE-2019-8506","id":9462,"kind":"cna","observed_at":1793938800,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-04T21:17:31.414Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://support.apple.com/HT209599\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://support.apple.com/HT209601\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://support.apple.com/HT209603\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://support.apple.com/HT209604\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://support.apple.com/HT209605\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://support.apple.com/HT209602\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"REQUIRED\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}}, {\"other\": {\"content\": {\"id\": \"CVE-2019-8506\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-01-29T17:41:25.943878Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2022-05-04\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8506\"}, \"type\": \"kev\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-843\", \"description\": \"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T23:35:55.429Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8506\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2022-05-04T00:00:00.000Z\", \"value\": \"CVE-2019-8506 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"iOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"iOS 12.2\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}]}, {\"product\": \"tvOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"tvOS 12.2\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}]}, {\"product\": \"watchOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"watchOS 5.2\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}]}, {\"product\": \"Safari\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"Safari 12.1\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}]}, {\"product\": \"iTunes for Windows\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"iTunes 12.9.4 for Windows\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}]}, {\"product\": \"iCloud for Windows\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"iCloud for Windows 7.11\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"Processing maliciously crafted web content may lead to arbitrary code execution\", \"lang\": \"en\", \"type\": \"text\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2019-12-18T17:33:16.000Z\", \"orgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"shortName\": \"apple\"}, \"references\": [{\"tags\": [\"x_refsource_MISC\"], \"url\": \"https://support.apple.com/HT209599\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"https://support.apple.com/HT209601\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"https://support.apple.com/HT209603\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"https://support.apple.com/HT209604\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"https://support.apple.com/HT209605\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"https://support.apple.com/HT209602\"}], \"x_legacyV4Record\": {\"CVE_data_meta\": {\"ASSIGNER\": \"product-security@apple.com\", \"ID\": \"CVE-2019-8506\", \"STATE\": \"PUBLIC\"}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"product_name\": \"iOS\", \"version\": {\"version_data\": [{\"version_affected\": \"<\", \"version_value\": \"iOS 12.2\"}]}}, {\"product_name\": \"tvOS\", \"version\": {\"version_data\": [{\"version_affected\": \"<\", \"version_value\": \"tvOS 12.2\"}]}}, {\"product_name\": \"watchOS\", \"version\": {\"version_data\": [{\"version_affected\": \"<\", \"version_value\": \"watchOS 5.2\"}]}}, {\"product_name\": \"Safari\", \"version\": {\"version_data\": [{\"version_affected\": \"<\", \"version_value\": \"Safari 12.1\"}]}}, {\"product_name\": \"iTunes for Windows\", \"version\": {\"version_data\": [{\"version_affected\": \"<\", \"version_value\": \"iTunes 12.9.4 for Windows\"}]}}, {\"product_name\": \"iCloud for Windows\", \"version\": {\"version_data\": [{\"version_affected\": \"<\", \"version_value\": \"iCloud for Windows 7.11\"}]}}]}, \"vendor_name\": \"Apple\"}]}}, \"data_format\": \"MITRE\", \"data_type\": \"CVE\", \"data_version\": \"4.0\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"Processing maliciously crafted web content may lead to arbitrary code execution\"}]}]}, \"references\": {\"reference_data\": [{\"name\": \"https://support.apple.com/HT209599\", \"refsource\": \"MISC\", \"url\": \"https://support.apple.com/HT209599\"}, {\"name\": \"https://support.apple.com/HT209601\", \"refsource\": \"MISC\", \"url\": \"https://support.apple.com/HT209601\"}, {\"name\": \"https://support.apple.com/HT209603\", \"refsource\": \"MISC\", \"url\": \"https://support.apple.com/HT209603\"}, {\"name\": \"https://support.apple.com/HT209604\", \"refsource\": \"MISC\", \"url\": \"https://support.apple.com/HT209604\"}, {\"name\": \"https://support.apple.com/HT209605\", \"refsource\": \"MISC\", \"url\": \"https://support.apple.com/HT209605\"}, {\"name\": \"https://support.apple.com/HT209602\", \"refsource\": \"MISC\", \"url\": \"https://support.apple.com/HT209602\"}]}}}}, \"cveMetadata\": {\"assignerOrgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"assignerShortName\": \"apple\", \"cveId\": \"CVE-2019-8506\", \"datePublished\": \"2019-12-18T17:33:16.000Z\", \"dateReserved\": \"2019-02-18T00:00:00.000Z\", \"dateUpdated\": \"2025-10-21T23:35:55.429Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2019-8506","id":9006,"kind":"epss","observed_at":1793895600,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.16159, \"percentile\": 0.96945}"},{"alert":0,"cve":"CVE-2019-8506","id":6794,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.16159, \"percentile\": 0.96942}"},{"alert":0,"cve":"CVE-2019-8506","id":4571,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.16159, \"percentile\": 0.96937}"},{"alert":0,"cve":"CVE-2019-8506","id":2353,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.16159, \"percentile\": 0.96933}"},{"alert":1,"cve":"CVE-2019-8506","id":1109,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2019-8506\", \"cwes\": [\"CWE-843\"], \"dateAdded\": \"2022-05-04\", \"dueDate\": \"2022-05-25\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://nvd.nist.gov/vuln/detail/CVE-2019-8506\", \"product\": \"Multiple Products\", \"requiredAction\": \"Apply updates per vendor instructions.\", \"shortDescription\": \"A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.\", \"vendorProject\": \"Apple\", \"vulnerabilityName\": \"Apple Multiple Products Type Confusion Vulnerability\"}"}],"record":{"affected":[{"product":"iOS","vendor":"Apple","versions":[{"lessThan":"iOS 12.2","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"tvOS","vendor":"Apple","versions":[{"lessThan":"tvOS 12.2","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"watchOS","vendor":"Apple","versions":[{"lessThan":"watchOS 5.2","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"Safari","vendor":"Apple","versions":[{"lessThan":"Safari 12.1","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"iTunes for Windows","vendor":"Apple","versions":[{"lessThan":"iTunes 12.9.4 for Windows","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"iCloud for Windows","vendor":"Apple","versions":[{"lessThan":"iCloud for Windows 7.11","status":"affected","version":"unspecified","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-04T21:17:31.414Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://support.apple.com/HT209599"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://support.apple.com/HT209601"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://support.apple.com/HT209603"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://support.apple.com/HT209604"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://support.apple.com/HT209605"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://support.apple.com/HT209602"}],"title":"CVE Program Container"},{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}},{"other":{"content":{"id":"CVE-2019-8506","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-01-29T17:41:25.943878Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2022-05-04","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8506"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-10-21T23:35:55.429Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8506"}],"timeline":[{"lang":"en","time":"2022-05-04T00:00:00.000Z","value":"CVE-2019-8506 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"iOS","vendor":"Apple","versions":[{"lessThan":"iOS 12.2","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"tvOS","vendor":"Apple","versions":[{"lessThan":"tvOS 12.2","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"watchOS","vendor":"Apple","versions":[{"lessThan":"watchOS 5.2","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"Safari","vendor":"Apple","versions":[{"lessThan":"Safari 12.1","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"iTunes for Windows","vendor":"Apple","versions":[{"lessThan":"iTunes 12.9.4 for Windows","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"iCloud for Windows","vendor":"Apple","versions":[{"lessThan":"iCloud for Windows 7.11","status":"affected","version":"unspecified","versionType":"custom"}]}],"descriptions":[{"lang":"en","value":"A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution."}],"problemTypes":[{"descriptions":[{"description":"Processing maliciously crafted web content may lead to arbitrary code execution","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2019-12-18T17:33:16.000Z","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple"},"references":[{"tags":["x_refsource_MISC"],"url":"https://support.apple.com/HT209599"},{"tags":["x_refsource_MISC"],"url":"https://support.apple.com/HT209601"},{"tags":["x_refsource_MISC"],"url":"https://support.apple.com/HT209603"},{"tags":["x_refsource_MISC"],"url":"https://support.apple.com/HT209604"},{"tags":["x_refsource_MISC"],"url":"https://support.apple.com/HT209605"},{"tags":["x_refsource_MISC"],"url":"https://support.apple.com/HT209602"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"product-security@apple.com","ID":"CVE-2019-8506","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"iOS","version":{"version_data":[{"version_affected":"<","version_value":"iOS 12.2"}]}},{"product_name":"tvOS","version":{"version_data":[{"version_affected":"<","version_value":"tvOS 12.2"}]}},{"product_name":"watchOS","version":{"version_data":[{"version_affected":"<","version_value":"watchOS 5.2"}]}},{"product_name":"Safari","version":{"version_data":[{"version_affected":"<","version_value":"Safari 12.1"}]}},{"product_name":"iTunes for Windows","version":{"version_data":[{"version_affected":"<","version_value":"iTunes 12.9.4 for Windows"}]}},{"product_name":"iCloud for Windows","version":{"version_data":[{"version_affected":"<","version_value":"iCloud for Windows 7.11"}]}}]},"vendor_name":"Apple"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Processing maliciously crafted web content may lead to arbitrary code execution"}]}]},"references":{"reference_data":[{"name":"https://support.apple.com/HT209599","refsource":"MISC","url":"https://support.apple.com/HT209599"},{"name":"https://support.apple.com/HT209601","refsource":"MISC","url":"https://support.apple.com/HT209601"},{"name":"https://support.apple.com/HT209603","refsource":"MISC","url":"https://support.apple.com/HT209603"},{"name":"https://support.apple.com/HT209604","refsource":"MISC","url":"https://support.apple.com/HT209604"},{"name":"https://support.apple.com/HT209605","refsource":"MISC","url":"https://support.apple.com/HT209605"},{"name":"https://support.apple.com/HT209602","refsource":"MISC","url":"https://support.apple.com/HT209602"}]}}}},"cveMetadata":{"assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","assignerShortName":"apple","cveId":"CVE-2019-8506","datePublished":"2019-12-18T17:33:16.000Z","dateReserved":"2019-02-18T00:00:00.000Z","dateUpdated":"2025-10-21T23:35:55.429Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1793938800,"cve":"CVE-2019-8506","description":"A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.","epss":{"date":"2026-11-12","epss":0.16159,"percentile":0.96978},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2019-8506","cwes":["CWE-843"],"dateAdded":"2022-05-04","dueDate":"2022-05-25","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-8506","product":"Multiple Products","requiredAction":"Apply updates per vendor instructions.","shortDescription":"A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.","vendorProject":"Apple","vulnerabilityName":"Apple Multiple Products Type Confusion Vulnerability"},"kev_checked":1794522003,"products":"Apple iOS, Apple tvOS, Apple watchOS, Apple Safari, Apple iTunes for Windows, Apple iCloud for Windows","references":["https://support.apple.com/HT209599","https://support.apple.com/HT209601","https://support.apple.com/HT209603","https://support.apple.com/HT209604","https://support.apple.com/HT209605","https://support.apple.com/HT209602","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8506"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","provider":"CISA-ADP","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Apple Multiple Products Type Confusion Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}