What’s Vulnerable › Vulnerabilities

CVE-2019-8741

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-02-28 · updated 2026-06-17
• Weakness: CWE-835

Description

A denial of service issue was addressed with improved input validation.

Affected products

• Apple iCloud for Windows: before 7.14; from 10.0 before 10.7 — fixed in 10.7, 7.14
• Apple Iphone Os: before 13.0 — fixed in 13.0
• Apple iTunes for Windows: before 12.10.1 — fixed in 12.10.1
• macOS: before 10.15 — fixed in 10.15
• Apple tvOS: before 13 — fixed in 13
• Apple watchOS: before 6.0 — fixed in 6.0

How to fix

Upgrade to a fixed version: Apple iCloud for Windows 10.7, 7.14; Apple Iphone Os 13.0; Apple iTunes for Windows 12.10.1; macOS 10.15; Apple tvOS 13; Apple watchOS 6.0. Check the vendor advisory for mitigations.

References

• https://eprint.iacr.org/2019/1421
• https://support.apple.com/HT210604
• https://support.apple.com/HT210606
• https://support.apple.com/HT210607
• https://support.apple.com/HT210634
• https://support.apple.com/HT210635
• https://support.apple.com/HT210636
• https://support.apple.com/HT210637
• https://eprint.iacr.org/2019/1421
• https://support.apple.com/HT210604
• https://support.apple.com/HT210606
• https://support.apple.com/HT210607

Get alerted when CVE-2019-8741 or the next vulnerability affects your stack