PT-2019-19141 · Apple · Apple Macos

Natashenka · Published 2019-12-18 · Updated 2019-12-19 · CVE-2019-8661

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.14.6

Description A use after free issue was addressed with improved memory management. A remote attacker may be able to cause arbitrary code execution.

Recommendations For macOS versions prior to 10.14.6, update to macOS Mojave 10.14.6 to resolve the issue.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2019-8661

Affected Products

Apple Macos

References · 4

• 🔥 https://exploit-db.com/exploits/47207 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-8661 · Security Note
• https://support.apple.com/HT210348 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-8661 · Vendor Advisory