CVE-2019-8809

published 2020-10-27

CVE-2019-8809: A validation issue was addressed with improved logic. This issue is fixed in macOS Catalina 10.15, iOS 13.1 and iPadOS 13.1, tvOS 13, watchOS 6, iOS 13. A…

Priority P4 10 low 3.3 CVSS 3.1

AV L AC L PR L UI N S U C L I N A N

A validation issue was addressed with improved logic. This issue is fixed in macOS Catalina 10.15, iOS 13.1 and iPadOS 13.1, tvOS 13, watchOS 6, iOS 13. A local app may be able to read a persistent account identifier.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
apple	ios	—	—
apple	ios	>= unspecified < 13	13
apple	ios_13.1_and_ipados	—	—
apple	ios_and_ipados	>= unspecified < 13.1	13.1
apple	ipados	< 13.1	13.1
apple	iphone_os	< 13.1	13.1
apple	mac_os_x	< 10.15	10.15
apple	macos	>= unspecified < 10.15	10.15
apple	macos_catalina	—	—
apple	tvos	< 13.0	13.0
apple	tvos	—	—
apple	tvos	>= unspecified < 13	13
apple	watchos	< 6.0	6.0
apple	watchos	>= unspecified < 6	6
apple	watchos_6	—	—

CVSS provenance

nvd v3.1 3.3 LOW CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

nvd v2.0 2.1 LOW AV:L/AC:L/Au:N/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.