An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data.
7.8Hoch
KEV
CVE-2019-8526Apple macOS Use-After-Free Vulnerability
Bekannt ausgenutzt — Apple macOS Use-After-Free Vulnerability
CISA hat am 17.04.2023 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 08.05.2023.
Erforderliche Maßnahme: Apply updates per vendor instructions. https://support.apple.com/en-us/HT209600; https://nvd.nist.gov/vuln/detail/CVE-2019-8526
Beschreibung
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.
Schwachstellentyp (CWE):
CWE-416
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://support.apple.com/HT209600 Release NotesVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8526 US Government Resource
CPE-Treffer (NVD) (1)
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*< 10.14.4