CVE-2019-8736
published 2020-10-27CVE-2019-8736: An input validation issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security…
PriorityP433medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
0.78%
51.2th percentile
An input validation issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. An attacker in a privileged network position may be able to leak sensitive user information.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | mac_os_x | < 10.15 | 10.15 |
| apple | macos | >= unspecified < 10.15 | 10.15 |
| apple | macos_catalina | — | — |
| apple | macos_catalina_10.15.1_security_update_2019-001_and_security_update_2019-006 | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2019-8736: macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006
vendor_apple·2019-10-29·CVSS 6.5
CVE-2019-8736 [MEDIUM] CVE-2019-8736: macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006
Apple Security Update: About the security content of macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006
Product: macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006
CVE: CVE-2019-8736
Component: CUPS
Impact: An attacker in a privileged network position may be able to leak sensitive user information
Description: An input validation issue was addressed with improved input validation.
Apple
CVE-2019-8736: macOS Catalina 10.15
vendor_apple·2019-10-07·CVSS 6.5
CVE-2019-8736 [MEDIUM] CVE-2019-8736: macOS Catalina 10.15
Apple Security Update: About the security content of macOS Catalina 10.15
Product: macOS Catalina
Version: 10.15
CVE: CVE-2019-8736
Component: CUPS
Impact: An attacker in a privileged network position may be able to leak sensitive user information
Description: An input validation issue was addressed with improved input validation.
GHSA
GHSA-xg2w-h2fg-xvm7: An input validation issue was addressed with improved input validation
ghsa_unreviewed·2022-05-24
CVE-2019-8736 [MEDIUM] CWE-20 GHSA-xg2w-h2fg-xvm7: An input validation issue was addressed with improved input validation
An input validation issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. An attacker in a privileged network position may be able to leak sensitive user information.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-10-27
Published