CVE-2019-8848: This issue was addressed with improved checks

Description

This issue was addressed with improved checks. This issue is fixed in tvOS 13.3, watchOS 6.1.1, iCloud for Windows 10.9, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra, iOS 13.3 and iPadOS 13.3, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. An application may be able to gain elevated privileges.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

Low

Privileges

None

User interaction

Required

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.0% · higher than 63% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

IO

iOS · Apple

before 13.3 · source: NVD

IC

Icloud · Apple

before 7.16; 10.0 before 10.9 · source: NVD

IT

Itunes · Apple

before 12.10.3 · source: NVD

MO

Mac OS X · Apple

before 10.15.2 · source: NVD

SA

Safari · Apple

before 13.0.3 · source: NVD

TV

Tvos · Apple

before 13.3 · source: NVD

WA

Watchos · Apple

before 6.1.1 · source: NVD