CVE-2019-8833
published 2020-10-27CVE-2019-8833: A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.3 and iPadOS 13.3, watchOS 6.1.1, macOS Catalina…
PriorityP340high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
1.30%
67.2th percentile
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.3 and iPadOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra, tvOS 13.3. An application may be able to execute arbitrary code with kernel privileges.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_13.3_and_ipados | — | — |
| apple | ios_and_ipados | >= unspecified < 13.3 | 13.3 |
| apple | ipados | < 13.3 | 13.3 |
| apple | iphone_os | < 13.3 | 13.3 |
| apple | mac_os_x | < 10.5.2 | 10.5.2 |
| apple | macos | >= unspecified < 10.15 | 10.15 |
| apple | macos | >= unspecified < 6.1 | 6.1 |
| apple | macos | >= unspecified < 13.3 | 13.3 |
| apple | macos_catalina_10.15.2_security_update_2019-002_mojave_security_update_2019-007 | — | — |
| apple | tvos | < 13.3 | 13.3 |
| apple | tvos | — | — |
| apple | watchos | < 6.1.1 | 6.1.1 |
| apple | watchos | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2019-8833: tvOS 13.3
vendor_apple·2019-12-10·CVSS 7.8
CVE-2019-8833 [HIGH] CVE-2019-8833: tvOS 13.3
Apple Security Update: About the security content of tvOS 13.3
Product: tvOS
Version: 13.3
CVE: CVE-2019-8833
Component: Kernel
Impact: An application may be able to execute arbitrary code with kernel privileges
Description: A memory corruption issue was addressed by removing the vulnerable code.
Apple
CVE-2019-8833: iOS 13.3 and iPadOS 13.3
vendor_apple·2019-12-10·CVSS 7.8
CVE-2019-8833 [HIGH] CVE-2019-8833: iOS 13.3 and iPadOS 13.3
Apple Security Update: About the security content of iOS 13.3 and iPadOS 13.3
Product: iOS 13.3 and iPadOS
Version: 13.3
CVE: CVE-2019-8833
Component: Kernel
Impact: An application may be able to execute arbitrary code with kernel privileges
Description: A memory corruption issue was addressed by removing the vulnerable code.
Apple
CVE-2019-8833: macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra
vendor_apple·2019-12-10·CVSS 7.8
CVE-2019-8833 [HIGH] CVE-2019-8833: macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra
Apple Security Update: About the security content of macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra
Product: macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra
CVE: CVE-2019-8833
Component: Kernel
Impact: An application may be able to execute arbitrary code with kernel privileges
Description: A memory corruption issue was addressed by removing the vulnerable code.
Apple
CVE-2019-8833: watchOS 6.1.1
vendor_apple·2019-12-10·CVSS 7.8
CVE-2019-8833 [HIGH] CVE-2019-8833: watchOS 6.1.1
Apple Security Update: About the security content of watchOS 6.1.1
Product: watchOS
Version: 6.1.1
CVE: CVE-2019-8833
Component: Kernel
Impact: An application may be able to execute arbitrary code with kernel privileges
Description: A memory corruption issue was addressed by removing the vulnerable code.
GHSA
GHSA-3p3r-fjqw-f7g3: A memory corruption issue was addressed by removing the vulnerable code
ghsa_unreviewed·2022-05-24
CVE-2019-8833 [HIGH] CWE-119 GHSA-3p3r-fjqw-f7g3: A memory corruption issue was addressed by removing the vulnerable code
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.3 and iPadOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra, tvOS 13.3. An application may be able to execute arbitrary code with kernel privileges.
No detection rules found.
No public exploits indexed.
Sentinelone
macOS Catalina 10.15.2 Update: What's New
blogs_sentinelone·2019-12-12·CVSS 8.8
[HIGH] macOS Catalina 10.15.2 Update: What's New
It’s been two months since Apple dropped the initial release of macOS Catalina, and after a rapid few supplemental updates and a first point upgrade in the first month, things appear to have slowed down to a normal cadence. This week, Apple dropped the public release of 10.15.2, a full month after showing developers the first beta. So, what’s changed in this update? Let’s take a look and see!
## Features and Tweaks
After installing the 10.15.2 update, users should find they are now on build 19C57. While point updates are not typically opportunities for Apple to add new features, 10.15.2 does bring a small number of user level additions.
Apple News receives a new layout and now carries content from the Wall Street Journal and other “leading newspapers”, while Stocks adds links to related
Sentinelone
macOS Catalina 10.15.2 Update: What's New
blogs_sentinelone·2019-12-12·CVSS 8.8
[HIGH] macOS Catalina 10.15.2 Update: What's New
It’s been two months since Apple dropped the initial release of macOS Catalina, and after a rapid few supplemental updates and a first point upgrade in the first month, things appear to have slowed down to a normal cadence. This week, Apple dropped the public release of 10.15.2, a full month after showing developers the first beta. So, what’s changed in this update? Let’s take a look and see!
## Features and Tweaks
After installing the 10.15.2 update, users should find they are now on build 19C57 . While point updates are not typically opportunities for Apple to add new features, 10.15.2 does bring a small number of user level additions.
Apple News receives a new layout and now carries content from the Wall Street Journal and other “leading newspapers”, while Stocks adds links to relate
https://support.apple.com/en-us/HT210785https://support.apple.com/en-us/HT210788https://support.apple.com/en-us/HT210789https://support.apple.com/en-us/HT210790https://support.apple.com/en-us/HT210785https://support.apple.com/en-us/HT210788https://support.apple.com/en-us/HT210789https://support.apple.com/en-us/HT210790
2020-10-27
Published