ID CVE-2019-8534
Summary A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. A malicious application may be able to execute arbitrary code with kernel privileges.
References
Vulnerable Configurations
  • cpe:2.3:o:apple:mac_os_x:10.14.3:*:*:*:*:*:*:*
    cpe:2.3:o:apple:mac_os_x:10.14.3:*:*:*:*:*:*:*
CVSS
Base: 7.2 (as of 29-10-2020 - 14:04)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:C/I:C/A:C
refmap via4
misc https://support.apple.com/en-us/HT209600
Last major update 29-10-2020 - 14:04
Published 27-10-2020 - 20:15
Last modified 29-10-2020 - 14:04
Back to Top