CVE-2019-7286: Apple iOS and macOS memory corruption allows privilege escalation

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 17 September 2026. Confidence: high.

high priorityThe flaw is in CISA KEV with known exploitation and a high CVSS score, but it requires local access and user interaction, limiting broad remote exploitation.

What it is

CVE-2019-7286 is an out-of-bounds write (CWE-787) in Apple iOS and macOS that was fixed through improved input validation in iOS 12.1.4 and macOS Mojave 10.14.3 Supplemental Update. The flaw lets an application gain elevated privileges, making it a local privilege escalation risk on affected Apple devices.

Impact

An attacker who can run code on the target gains elevated privileges, potentially enabling further compromise of the device. The CVSS 3.1 base score is 7.8 (HIGH) with high confidentiality, integrity, and availability impact.

Attack surface

The CVSS vector is local (AV:L) with user interaction required (UI:R) and no privileges required (PR:N), so the flaw is reached by a local application and needs a user to trigger it. No remote or network vector is indicated.

Exploitation

CVE-2019-7286 is listed in CISA's Known Exploited Vulnerabilities catalog (added 2022-05-23), indicating known exploitation in the wild. EPSS gives a 30-day probability of 0.15582 (96.651 percentile), and references are vendor advisories plus the CISA KEV entry.

What to do

• Apply the vendor updates: iOS 12.1.4 and macOS Mojave 10.14.3 Supplemental Update, or later supported versions.
• Follow CISA KEV required action to apply updates per vendor instructions by the due date.
• Restrict installation and execution of untrusted applications on managed Apple devices.
• Keep macOS and iOS devices on currently supported releases to receive ongoing security fixes.
• Monitor Apple security advisories for related fixes and re-check affected versions.

Detection

• Monitor for unexpected privilege escalation or anomalous process behavior on Apple endpoints.
• Track application crashes or memory corruption indicators that may precede exploitation.
• Use endpoint detection to flag untrusted applications attempting to gain elevated privileges.
• Audit device patch levels against iOS 12.1.4 and macOS Mojave 10.14.3 Supplemental Update baselines.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.