CVE-2019-8633

EPSS 0.38%
Published 27.10.2020 20:15:16
Last modified 21.11.2024 04:50:12
Source product-security@apple.com
Teams watchlist Login
Open Login

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iOS 12.3, tvOS 12.3, watchOS 5.3. An application may be able to read restricted memory.

Affected products Warnungen 0 Metrics 3 CWE 1 References 7

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ iPhone OS Version < 12.3

Apple ≫ macOS X Version >= 10.13.6 < 10.14.5

Apple ≫ tvOS Version < 12.3

Apple ≫ watchOS Version < 5.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.38%	0.564

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://support.apple.com/en-us/HT210119

Vendor Advisory

https://support.apple.com/en-us/HT210118

Vendor Advisory

https://support.apple.com/en-us/HT210120

Vendor Advisory

https://support.apple.com/en-us/HT210353

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-8633

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-8633

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-8633

EUVD