Skip to content
COOEY

EXPOSURES › CVE-2019-7287

CVE-2019-7287

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-05-23 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-7287 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 75/100 rceexploited-in-wildunpatched

Apple iOS memory corruption vulnerability allows remote code execution and is actively exploited in the wild.

A memory corruption flaw in Apple iOS enables attackers to execute arbitrary code remotely, posing a severe risk to mobile devices used by defense contractors. This vulnerability is listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, indicating it is actively exploited in the wild. DIB organizations must ensure all iOS devices are patched immediately to prevent compromise and maintain compliance with security requirements.

Shame score — The vulnerability is actively exploited in the wild and allows remote code execution, representing a severe and avoidable risk that compromises device integrity and data confidentiality.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.