CVE-2019-8711
published 2019-12-18CVE-2019-8711: A logic issue existed with the display of notification previews. This issue was addressed with improved validation. This issue is fixed in iOS 13. Notification…
PriorityP423medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
1.05%
61.0th percentile
A logic issue existed with the display of notification previews. This issue was addressed with improved validation. This issue is fixed in iOS 13. Notification previews may show on Bluetooth accessories even when previews are disabled.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios | — | — |
| apple | ios | >= unspecified < iOS 13 | iOS 13 |
| apple | iphone_os | < 13.0 | 13.0 |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9x6h-j393-8wqx: A logic issue existed with the display of notification previews
ghsa_unreviewed·2022-05-24
CVE-2019-8711 [MEDIUM] CWE-200 GHSA-9x6h-j393-8wqx: A logic issue existed with the display of notification previews
A logic issue existed with the display of notification previews. This issue was addressed with improved validation. This issue is fixed in iOS 13. Notification previews may show on Bluetooth accessories even when previews are disabled.
Apple
CVE-2019-8711: iOS 13
vendor_apple·2019-09-19·CVSS 5.3
CVE-2019-8711 [MEDIUM] CVE-2019-8711: iOS 13
Apple Security Update: About the security content of iOS 13
Product: iOS
Version: 13
CVE: CVE-2019-8711
Component: Bluetooth
Impact: Notification previews may show on Bluetooth accessories even when previews are disabled
Description: A logic issue existed with the display of notification previews. This issue was addressed with improved validation.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-12-18
Published