CVE-2019-8607

CVE-2019-8607 is an out-of-bounds read vulnerability affecting multiple Apple products, including iOS, macOS, tvOS, watchOS, Safari, iTunes for Windows, and iCloud for Windows. This flaw, addressed by improved input validation in various updates, could lead to the disclosure of process memory if a user processes maliciously crafted web content. Rated as Medium severity (CVSS 6.5), it requires user interaction (UI:R) and has a network attack vector (AV:N) with low attack complexity (AC:L), primarily impacting confidentiality (C:H). There is no evidence of active exploitation, nor is public exploit code available in Metasploit, Nuclei, or ExploitDB, though it has garnered some community discussion and media coverage.