PT-2020-11257 · Apple · Macos Catalina

Codecolorist · Published 2020-10-27 · Updated 2020-10-30 · CVE-2019-8509

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS Catalina versions prior to 10.15.1

Description A malicious application may be able to elevate privileges due to a vulnerability in the system. The issue was addressed by removing the vulnerable code.

Recommendations For macOS Catalina versions prior to 10.15.1, update to macOS Catalina 10.15.1 or apply Security Update 2019-001 or Security Update 2019-006 to resolve the issue.

Fix

Related Identifiers

CVE-2019-8509

Affected Products

Macos Catalina

References · 4

• https://support.apple.com/en-us/HT210722 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-8509 · Security Note
• https://support.apple.com/en-us/HT210634 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-8509 · Vendor Advisory