CVE-2019-8854

published 2020-10-27

CVE-2019-8854: A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in macOS Catalina 10.15, watchOS 6, iOS 13, tvOS 13. A device may…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in macOS Catalina 10.15, watchOS 6, iOS 13, tvOS 13. A device may be passively tracked by its Wi-Fi MAC address.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
apple	ios	—	—
apple	ios	>= unspecified < 13	13
apple	iphone_os	< 13.2	13.2
apple	mac_os_x	< 10.15	10.15
apple	macos	>= unspecified < 10.15	10.15
apple	macos_catalina	—	—
apple	tvos	< 13.2	13.2
apple	tvos	—	—
apple	tvos	>= unspecified < 13	13
apple	watchos	< 6.0	6.0
apple	watchos	>= unspecified < 6	6
apple	watchos_6	—	—