PT-2019-19195 · Apple · Apple Macos

William Cerniuk · Published 2019-12-18 · Updated 2019-12-26 · CVE-2019-8757

Positive Technologies (AI Summary)

CVSS v3.1

2.5

Low

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15

Description A race condition existed when reading and writing user preferences, which has been addressed with improved state handling. The issue involved the "Share Mac Analytics" setting, where it may not be disabled when a user deselects the switch to share analytics.

Recommendations For versions prior to 10.15, update to macOS Catalina 10.15 to resolve the issue.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2019-8757

Affected Products

Apple Macos

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-8757 · Security Note
• https://support.apple.com/HT210634 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-8757 · Vendor Advisory