EXPOSURES › CVE-2019-7287
CVE-2019-7287
HIGH ⌖ ON CISA KEV · EXPLOITEDApple iOS memory corruption vulnerability allows remote code execution and is actively exploited in the wild.
A memory corruption flaw in Apple iOS enables attackers to execute arbitrary code remotely, posing a severe risk to mobile devices used by defense contractors. This vulnerability is listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, indicating it is actively exploited in the wild. DIB organizations must ensure all iOS devices are patched immediately to prevent compromise and maintain compliance with security requirements.
Shame score — The vulnerability is actively exploited in the wild and allows remote code execution, representing a severe and avoidable risk that compromises device integrity and data confidentiality.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution.