CVE-2019-8809 — Apple IOS AND Ipados vulnerability

8 documents4 sources
Severity
3.3LOWNVD
EPSS
0.1%
top 78.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Apple IOSApple IOS AND IpadosApple Macos+5 more
Timeline
PublishedOct 27
Latest updateMay 24

Description

A validation issue was addressed with improved logic. This issue is fixed in macOS Catalina 10.15, iOS 13.1 and iPadOS 13.1, tvOS 13, watchOS 6, iOS 13. A local app may be able to read a persistent account identifier.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages10 packages

▶CVEListV5apple/tvosunspecified — 13
▶NVDapple/tvos< 13.0
▶CVEListV5apple/macosunspecified — 10.15
▶NVDapple/ipados< 13.1
▶CVEListV5apple/watchosunspecified — 6

🔴Vulnerability Details

2
GHSA
GHSA-88vf-xpq3-m34p: A validation issue was addressed with improved logic↗2022-05-24
▶
CVEList
CVE-2019-8809: A validation issue was addressed with improved logic↗2020-10-27
▶

📋Vendor Advisories

5
Apple
CVE-2019-8809: macOS Catalina 10.15↗2019-10-07
▶
Apple
CVE-2019-8809: tvOS 13↗2019-09-24
▶
Apple
CVE-2019-8809: iOS 13.1 and iPadOS 13.1↗2019-09-24
▶
Apple
CVE-2019-8809: watchOS 6↗2019-09-19
▶
Apple
CVE-2019-8809: iOS 13↗2019-09-19
▶
CVE-2019-8809 — Apple IOS AND Ipados vulnerability | cvebase