An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data.
7.8Alta
KEV
CVE-2019-8526Apple macOS Use-After-Free Vulnerability
Explotación conocida — Apple macOS Use-After-Free Vulnerability
CISA confirmó el 17.04.2023 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 08.05.2023.
Acción requerida: Apply updates per vendor instructions. https://support.apple.com/en-us/HT209600; https://nvd.nist.gov/vuln/detail/CVE-2019-8526
Descripción
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.
Debilidad (CWE):
CWE-416
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
Referencias y parches
- https://support.apple.com/HT209600 Release NotesVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8526 US Government Resource
Coincidencias CPE (NVD) (1)
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*< 10.14.4