PT-2020-11329 · Apple · Macos High Sierra+2

Jianjun Dai · Published 2020-10-27 · Updated 2020-10-29 · CVE-2019-8853

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS Catalina versions prior to 10.15.4 Security Update for Mojave versions prior to 2020-002 Security Update for High Sierra versions prior to 2020-002

Description A validation issue was addressed with improved input sanitization, allowing an application to potentially read restricted memory.

Recommendations For macOS Catalina versions prior to 10.15.4, update to macOS Catalina 10.15.4 or later. For Security Update for Mojave versions prior to 2020-002, apply Security Update 2020-002 or later. For Security Update for High Sierra versions prior to 2020-002, apply Security Update 2020-002 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2019-8853

Affected Products

Macos Catalina

Macos High Sierra

Macos Mojave

References · 5

• https://osv.dev/vulnerability/CVE-2019-8853 · Vendor Advisory
• https://support.apple.com/en-us/HT211100 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-8853 · Security Note
• https://support.apple.com/en-us/HT210788 · Vendor Advisory
• https://t.me/cibsecurity/15639 · Telegram Post