{"id":"CVE-2019-8740","aliases":["EUVD-2019-18130","GHSA-cfj2-6prp-5xvj"],"status":"published","title":"A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS...","description":"A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 13.1 and iPadOS 13.1, watchOS 6, tvOS 13. An application may be able to execute arbitrary code with kernel privileges.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01297,"percentile":0.70617,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2020-10-27T19:44:12Z","modified":"2026-06-17T02:42:30Z","products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipad_os"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"tvos"},{"vendor":"apple","product":"watchos"}],"references":[{"url":"https://support.apple.com/en-us/HT210604","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT210607","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT210603","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-8740"},{"url":"https://github.com/advisories/GHSA-cfj2-6prp-5xvj"}],"sources":{"cve":[{"id":"CVE-2019-8740","description":"A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 13.1 and iPadOS 13.1, watchOS 6, tvOS 13. An application may be able to execute arbitrary code with kernel privileges.","status":"published","published":"2020-10-27T19:44:12Z","modified":"2024-08-04T21:24:29.614Z","updated_at":"2026-11-02T14:20:22.019351Z"}],"euvd":[{"id":"EUVD-2019-18130","description":"A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 13.1 and iPadOS 13.1, watchOS 6, tvOS 13. An application may be able to execute arbitrary code with kernel privileges.","status":"published","published":"2020-10-27T19:44:12Z","modified":"2024-08-04T21:24:29Z","updated_at":"2026-11-03T03:06:41.543253Z"}],"ghsa":[{"id":"GHSA-cfj2-6prp-5xvj","title":"A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS...","description":"A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 13.1 and iPadOS 13.1, watchOS 6, tvOS 13. An application may be able to execute arbitrary code with kernel privileges.","status":"published","published":"2022-05-24T17:32:21Z","modified":"2023-01-29T05:04:33Z","updated_at":"2026-11-02T14:45:35.161944Z"}],"nvd":[{"id":"CVE-2019-8740","description":"A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 13.1 and iPadOS 13.1, watchOS 6, tvOS 13. An application may be able to execute arbitrary code with kernel privileges.","status":"published","published":"2020-10-27T20:15:18.237Z","modified":"2026-06-17T02:42:30.74Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:05:48.502374Z"}]}}