CVE-2019-8703

Опубликовано: 23 дек. 2021

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

This issue was addressed with improved entitlements. This issue is fixed in watchOS 6, tvOS 13, macOS Catalina 10.15, iOS 13. An application may be able to gain elevated privileges.

Ссылки

https://support.apple.com/en-us/HT210604
Vendor Advisory
https://support.apple.com/en-us/HT210606
Vendor Advisory
https://support.apple.com/en-us/HT210607
Vendor Advisory
https://support.apple.com/en-us/HT210634
Vendor Advisory
https://support.apple.com/en-us/HT210604
Vendor Advisory
https://support.apple.com/en-us/HT210606
Vendor Advisory
https://support.apple.com/en-us/HT210607
Vendor Advisory
https://support.apple.com/en-us/HT210634
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 13.0 (исключая)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия до 10.15 (исключая)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 13.0 (включая)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 6.0 (исключая)

EPSS

Процентиль: 75%

0.00868

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-4g77-86xf-vfq8

github

около 4 лет назад