CVE-2019-10038
published 2019-05-31CVE-2019-10038: Evernote 7.9 on macOS allows attackers to execute arbitrary programs by embedding a reference to a local executable file such as the…
PriorityP340high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
EXPLOIT
EPSS
1.31%
67.0th percentile
Evernote 7.9 on macOS allows attackers to execute arbitrary programs by embedding a reference to a local executable file such as the /Applications/Calculator.app/Contents/MacOS/Calculator file.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| evernote | evernote | — | — |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.04.4MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
https://drive.google.com/file/d/1cmWixK1vAh7oZ2y3Y3ZtVeSoTRp8c1Ts/view?usp=sharinghttps://evernote.com/security/updateshttps://www.inputzero.io/2019/04/evernote-cve-2019-10038.htmlhttps://drive.google.com/file/d/1cmWixK1vAh7oZ2y3Y3ZtVeSoTRp8c1Ts/view?usp=sharinghttps://evernote.com/security/updateshttps://www.inputzero.io/2019/04/evernote-cve-2019-10038.html
2019-05-31
Published