CVE-2019-7286

Apple's iOS, macOS, watchOS, and tvOS suffered a memory corruption vulnerability allowing privilege escalation that was actively exploited in the wild.

A memory corruption flaw in Apple's operating systems allowed attackers to escalate privileges, and it was listed in CISA's KEV catalog as actively exploited. DIB organizations must ensure all Apple devices are patched immediately to prevent unauthorized access and maintain compliance with security requirements. This failure highlights the risk of relying on unpatched software, even from reputable vendors.

Shame score — The vulnerability was actively exploited in the wild and included in CISA's KEV catalog, indicating a significant security failure that could have led to data breaches or system compromises.