PT-2020-11318 · Apple · Apple Macos

Csaba Fitzl + 1 · Published 2020-10-27 · Updated 2021-07-21 · CVE-2019-8837

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.2 Security Update 2019-002 Mojave (affected versions not specified) Security Update 2019-007 High Sierra (affected versions not specified)

Description A logic issue was addressed with improved restrictions, which could allow a malicious application to access restricted files.

Recommendations For macOS versions prior to 10.15.2, update to macOS Catalina 10.15.2 or later. For Security Update 2019-002 Mojave, apply Security Update 2019-002. For Security Update 2019-007 High Sierra, apply Security Update 2019-007.

Fix

Related Identifiers

CVE-2019-8837

Affected Products

Apple Macos

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-8837 · Security Note
• https://osv.dev/vulnerability/CVE-2019-8837 · Vendor Advisory
• https://support.apple.com/en-us/HT210788 · Vendor Advisory