PT-2020-8926 · Apple · Sierra+2

David Vernet + 3 · Published 2020-10-27 · Updated 2020-10-30 · CVE-2018-4467

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.14.3 Security Update versions prior to 2019-001 for High Sierra and Sierra

Description A memory corruption issue was addressed with improved state management. A malicious application may be able to elevate privileges.

Recommendations For macOS versions prior to 10.14.3, update to macOS Mojave 10.14.3 or later to resolve the issue. For High Sierra, apply Security Update 2019-001 or later. For Sierra, apply Security Update 2019-001 or later.

Fix

Related Identifiers

CVE-2018-4467

Affected Products

High Sierra

Sierra

Apple Macos

References · 4

• https://support.apple.com/en-us/HT209341 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-4467 · Vendor Advisory
• https://support.apple.com/en-us/HT209446 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-4467 · Security Note