CVE-2019-8784
published 2019-12-18CVE-2019-8784: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, iTunes for…
PriorityP339high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
1.35%
68.3th percentile
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. An application may be able to execute arbitrary code with system privileges.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | icloud | < 7.15 | 7.15 |
| apple | icloud | >= 10.0 < 10.8 | 10.8 |
| apple | icloud_for_windows | — | — |
| apple | icloud_for_windows | — | — |
| apple | icloud_for_windows | >= unspecified < iCloud for Windows 11.0 | iCloud for Windows 11.0 |
| apple | icloud_for_windows | >= unspecified < iCloud for Windows 7.15 | iCloud for Windows 7.15 |
| apple | ios | >= unspecified < iOS 13.2 and iPadOS 13.2 | iOS 13.2 and iPadOS 13.2 |
| apple | ios_13.2_and_ipados | — | — |
| apple | ipados | < 13.2 | 13.2 |
| apple | iphone_os | < 13.2 | 13.2 |
| apple | itunes | < 12.10.2 | 12.10.2 |
| apple | itunes_12.10.2_for_windows | — | — |
| apple | itunes_for_windows | >= unspecified < iTunes for Windows 12.10.2 | iTunes for Windows 12.10.2 |
| apple | mac_os_x | < 10.15.1 | 10.15.1 |
| apple | macos | >= unspecified < macOS Catalina 10.15.1 | macOS Catalina 10.15.1 |
| apple | macos_catalina_10.15.1_security_update_2019-001_and_security_update_2019-006 | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2019-8784: iCloud for Windows 10.8
vendor_apple·2019-10-30·CVSS 7.8
CVE-2019-8784 [HIGH] CVE-2019-8784: iCloud for Windows 10.8
Apple Security Update: About the security content of iCloud for Windows 10.8
Product: iCloud for Windows
Version: 10.8
CVE: CVE-2019-8784
Component: Graphics Driver
Impact: An application may be able to execute arbitrary code with system privileges
Description: A memory corruption issue was addressed with improved memory handling.
Apple
CVE-2019-8784: iCloud for Windows 7.15
vendor_apple·2019-10-30·CVSS 7.8
CVE-2019-8784 [HIGH] CVE-2019-8784: iCloud for Windows 7.15
Apple Security Update: About the security content of iCloud for Windows 7.15
Product: iCloud for Windows
Version: 7.15
CVE: CVE-2019-8784
Component: Graphics Driver
Impact: An application may be able to execute arbitrary code with system privileges
Description: A memory corruption issue was addressed with improved memory handling.
Apple
CVE-2019-8784: iTunes 12.10.2 for Windows
vendor_apple·2019-10-30·CVSS 7.8
CVE-2019-8784 [HIGH] CVE-2019-8784: iTunes 12.10.2 for Windows
Apple Security Update: About the security content of iTunes 12.10.2 for Windows
Product: iTunes 12.10.2 for Windows
CVE: CVE-2019-8784
Component: Graphics Driver
Impact: An application may be able to execute arbitrary code with system privileges
Description: A memory corruption issue was addressed with improved memory handling.
Apple
CVE-2019-8784: macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006
vendor_apple·2019-10-29·CVSS 7.8
CVE-2019-8784 [HIGH] CVE-2019-8784: macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006
Apple Security Update: About the security content of macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006
Product: macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006
CVE: CVE-2019-8784
Component: Graphics Driver
Impact: An application may be able to execute arbitrary code with system privileges
Description: A memory corruption issue was addressed with improved memory handling.
Apple
CVE-2019-8784: iOS 13.2 and iPadOS 13.2
vendor_apple·2019-10-28·CVSS 7.8
CVE-2019-8784 [HIGH] CVE-2019-8784: iOS 13.2 and iPadOS 13.2
Apple Security Update: About the security content of iOS 13.2 and iPadOS 13.2
Product: iOS 13.2 and iPadOS
Version: 13.2
CVE: CVE-2019-8784
Component: Graphics Driver
Impact: An application may be able to execute arbitrary code with system privileges
Description: A memory corruption issue was addressed with improved memory handling.
GHSA
GHSA-42mj-fvxr-hp4j: A memory corruption issue was addressed with improved memory handling
ghsa_unreviewed·2022-05-24
CVE-2019-8784 [HIGH] CWE-119 GHSA-42mj-fvxr-hp4j: A memory corruption issue was addressed with improved memory handling
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. An application may be able to execute arbitrary code with system privileges.
No detection rules found.
No public exploits indexed.
Sentinelone
Privilege Escalation | macOS Malware & The Path to Root Part 1 - SentinelLabs
blogs_sentinelone·2019-11-06
Privilege Escalation | macOS Malware & The Path to Root Part 1 - SentinelLabs
In this two-part series, we take a look at privilege escalation on macOS. In Part 1, we look at some of the vulnerabilities that have been discovered by security researchers in recent versions of Apple’s Desktop OS, focusing on those that have been turned into reliable exploits. We draw conclusions for enterprise and end users alike based on this review. In Part 2, we switch from researchers to attackers and explore both how and why the methodology of macOS threat actors takes quite a different path from that of the research community.
## What is Privilege Escalation?
Let’s start by defining our terms. Whenever code executes, it does so within the context of a user who invokes it. Technically, users need not always actually be people, but for our purposes here we’ll stick to the simple c
Sentinelone
Privilege Escalation | macOS Malware & The Path to Root Part 1
blogs_sentinelone·2019-11-06
Privilege Escalation | macOS Malware & The Path to Root Part 1
## Privilege Escalation | macOS Malware & The Path to Root Part 1
In this two-part series, we take a look at privilege escalation on macOS. In Part 1, we look at some of the vulnerabilities that have been discovered by security researchers in recent versions of Apple’s Desktop OS, focusing on those that have been turned into reliable exploits. We draw conclusions for enterprise and end users alike based on this review. In Part 2 , we switch from researchers to attackers and explore both how and why the methodology of macOS threat actors takes quite a different path from that of the research community.
## What is Privilege Escalation?
Let’s start by defining our terms. Whenever code executes, it does so within the context of a user who invokes it. Technically, users need not always actua
https://support.apple.com/HT210721https://support.apple.com/HT210722https://support.apple.com/HT210726https://support.apple.com/HT210727https://support.apple.com/HT210728https://support.apple.com/HT210721https://support.apple.com/HT210722https://support.apple.com/HT210726https://support.apple.com/HT210727https://support.apple.com/HT210728
2019-12-18
Published